CVE-2020-36757

creationtimestamp| type| source ---|---|--- 2023-07-12 12:35:48+00:00| seen| https://t.me/cibsecurity/66480...

CVE-2020-36757

The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.10.1. This is due to missing or incorrect nonce validation on the adminaddorderitem function. This makes it possible for unauthenticated attackers to add an order item via a...

CVE-2020-36757

The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to 1.10.1 due to missing or incorrect nonce validation on the admin_add_order_item() function. This allows unauthenticated attackers to add an order item via a forged request by tricking a site ad...