CVE-2021-36852

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/wp-hotel-booking/wordpress-wp-hotel-booking-plugin-1-10-5-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/wp-hotel-booking · Product

Lỗ hổng khác của wp hotel booking

• CVE-2024-13447TRUNG BÌNH 4.3The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hotel_bookin…
• CVE-2024-12370TRUNG BÌNH 5.3The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding r…
• CVE-2024-51582CAO 8.8Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects …
• CVE-2024-7855CAO 8.8The WP Hotel Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_review()…
• CVE-2024-3605NGHIÊM TRỌNG 9.8The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/rooms/search-rooms RE…