CVE-2021-36852

Description

References

• patchstack.com/database/vulnerability/wp-hotel-booking/wordpress-wp-hotel-booking-plugin-1-10-5-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/wp-hotel-booking · Product

wp hotel booking 的其他漏洞

• CVE-2024-13447中危 4.3The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hotel_bookin…
• CVE-2024-12370中危 5.3The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding r…
• CVE-2024-51582高危 8.8Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects …
• CVE-2024-7855高危 8.8The WP Hotel Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_review()…
• CVE-2024-3605严重 9.8The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/rooms/search-rooms RE…