CVE-2026-15153

The WP Hotel Booking WordPress plugin, in versions prior to 2.3.2 , is vulnerable to SQL injection due to improper sanitization and escaping of a search parameter on an administrative listing. This flaw allows users with booking-management roles to execute arbitrary SQL queries. While the vulnera...

WordPress Booking Calendar Contact Form 1.0.23 CSRF / XSS

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Privilege escalation / stored XSS vulnerabilities Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage:...