Lucene search
China National Vulnerability DatabaseCNVD-2022-86358HistoryNov 30, 2022 - 12:00 a.m.
WordPress Appointment Hour Booking plugin weak algorithm vulnerability
2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wordpress
plugin
vulnerability
weak algorithm
captcha
cookie
0.001 Low
EPSS
Percentile
35.0%
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. dwbooster Appointment Hour Booking plugin 1.3.72 and earlier versions contain a weak algorithm vulnerability that stems from the use of an insufficiently complex hash algorithm for CAPTCHA keys. An attacker could exploit the vulnerability to obtain CAPTCHA key information via a cookie.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress appointment hour booking plugin | le | 1.3.72 |
Related
cve
cve
CVE-2022-4036
2022-11-29 21:15:12
cvelist
cvelist
CVE-2022-4036
2022-11-29 20:34:59
nvd
nvd
CVE-2022-4036
2022-11-29 21:15:12
wpvulndb
wpvulndb
Appointment Hour Booking < 1.3.73 - CAPTCHA Bypass
2022-11-29 00:00:00
prion
prion
Design/Logic Flaw
2022-11-29 21:15:00
openvas
openvas
WordPress Appointment Hour Booking Plugin < 1.3.73 Multiple Vulnerabilities
2023-08-11 00:00:00