Lucene search
HistoryNov 20, 2023 - 7:15 p.m.
CVE-2023-5799
wp hotel booking
authorisation
vulnerability
plugin
wordpress
role-based access control
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
0.0004 Low
EPSS
Percentile
13.5%
The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them
Affected configurations
Node
thimpresswp_hotel_bookingRange<2.0.8wordpress
Related
cvelist
cvelist
wpvulndb
wpvulndb
WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion
2023-10-26 00:00:00
cve
cve
CVE-2023-5799
2023-11-20 19:15:10
prion
prion
Design/Logic Flaw
2023-11-20 19:15:00
wpexploit
wpexploit
WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion
2023-10-26 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
0.0004 Low
EPSS
Percentile
13.5%
Related for NVD:CVE-2023-5799