Wp Hotel Booking Security Vulnerabilities and Issues — Wp Hotel Booking CVE List

Lucene search

ThimpressWp Hotel Booking

3 matches found

CVE•added 2021/03/03 6:15 p.m.•65 views

CVE-2020-29047

The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php.

9.8CVSS9.8AI score0.78032EPSS

CVE•added 2024/03/29 3:15 p.m.•54 views

CVE-2024-30508

Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP Hotel Booking: from n/a through 2.0.9.2.

9.8CVSS6.8AI score0.00243EPSS

CVE•added 2023/11/20 7:15 p.m.•49 views

CVE-2023-5652

The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections

9.8CVSS9.8AI score0.18471EPSS