5 matches found
CVE-2020-29047
The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpresshotelbooking1 cookie in load in includes/class-wphb-sessions.php...
WordPress Hotel Booking Plugin Remote Code Execution (CVE-2020-29047)
A remote code execution vulnerability exists in WordPress Hotel Booking Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2020-29047
creationtimestamp| type| source ---|---|--- 2021-03-03 20:45:55+00:00| seen| https://t.me/cibsecurity/24415 2025-05-31 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingbu3fr2s...
CVE-2020-29047
The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpresshotelbooking1 cookie in load in includes/class-wphb-sessions.php...
CVE-2020-29047
The wp-hotel-booking plugin for WordPress (versions through 1.10.2 ) is vulnerable to Remote Code Execution (RCE) . The root cause is an insecure unserialize operation performed on the thimpress_hotel_booking_1 cookie within includes/class-wphb-sessions.php. Unauthenticated remote attackers can e...