WordPress WP Hotel Booking Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload

Software WP Hotel Booking Type Plugin Vulnerable versions = 2.1.2 Fixed in 2.1.3 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7855 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 3cc7b05576d0 Credits Truoc Phan Required privilege Subscribe...

PT-2021-11642 · WordPress · Wp Hotel Booking

Name of the Vulnerable Software and Affected Versions: wp-hotel-booking plugin versions 1.10.2 and earlier Description: The issue allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress hotel booking 1 cookie in the includes/class-wphb-sessions.php...