10 matches found
ND Booking < 2.5 - Unauthenticated Options Change
The Hotel Booking WordPress plugin ND Booking 2.5 was affected by an Unauthenticated Options Change security vulnerability. id: CVE-2019-15774 info: name: ND Booking 2.5 - Unauthenticated Options Change author: popcorn94 severity: medium description: | The Hotel Booking WordPress plugin ND Bookin...
EUVD-2019-6698
Malware in sbrugna...
CVE-2019-15774
The nd-booking plugin before 2.5 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
WordPress nd-booking Plugin Unauthorized Operation Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. nd-booking is an online reservation management plugin used in it. A security vulnerability exists in WordPress nd-booking plugin befor...
CVE-2019-15774
The nd-booking plugin before 2.5 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
Code injection
The nd-booking plugin before 2.5 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2019-15774
The nd-booking plugin before 2.5 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2019-15774
The ND Booking WordPress plugin (versions prior to 2.5 ) is vulnerable to an Unauthenticated Options Change security flaw. An unauthenticated attacker can exploit a nopriv_ AJAX action to modify the siteurl setting or other plugin options. This could allow an attacker to enable development mode, ...
PT-2019-14383
Name of the Vulnerable Software and Affected Versions nd-booking plugin versions prior to 2.5 Description The issue allows modification of the siteurl setting through a nopriv AJAX action. Recommendations For versions prior to 2.5, update the nd-booking plugin to version 2.5 or later to resolve t...
