Lucene search
K

WordPress WP Hotel Booking plugin <= 1.10.2 - Unauthenticated Remote Code Execution (RCE) via Arbitrary Object Deserialisation vulnerability

🗓️ 03 Mar 2021 00:00:00Reported by Nick Blundell (AppCheck Ltd)Type 
patchstack
 patchstack
🔗 patchstack.com👁 28 Views

Unauthenticated remote code execution vulnerability in WordPress WP Hotel Booking plugi

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2020-29047
3 Mar 202120:45
circl
CNNVD
WordPress 代码问题漏洞
3 Mar 202100:00
cnnvd
CNVD
WordPress wp-hotel-booking plugin deserialization vulnerability
5 Mar 202100:00
cnvd
Check Point Advisories
WordPress Hotel Booking Plugin Remote Code Execution (CVE-2020-29047)
2 May 202100:00
checkpoint_advisories
CVE
CVE-2020-29047
3 Mar 202117:15
cve
Cvelist
CVE-2020-29047
3 Mar 202117:15
cvelist
Nuclei
WP Hotel Booking < 1.10.4 - PHP Object Injection
11 Jun 202603:33
nuclei
NVD
CVE-2020-29047
3 Mar 202118:15
nvd
OSV
CVE-2020-29047
3 Mar 202118:15
osv
Prion
Design/Logic Flaw
3 Mar 202118:15
prion
Rows per page
Vulners
Node
thimpresswp_hotel_bookingRange1.10.2wordpress

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Mar 2021 00:00Current
4.8Medium risk
Vulners AI Score4.8
CVSS 27.5
CVSS 3.19.8
EPSS0.8462
28