Lucene search
WpvulndbWPVDB-ID:3C339DE9-BBE1-46B5-938B-7C4A7033F905HistoryMay 03, 2024 - 12:00 a.m.
WP Travel Engine < 5.8.1 - Unauthenticated Price Manipulation
2024-05-0300:00:00
wpscan.com
5
wordpress
travel booking
price manipulation
vulnerability
unauthenticated attackers
7 High
AI Score
Confidence
High
Description The WP Travel Engine – Best Travel Booking WordPress Plugin plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 5.8.0. This is due to the plugin not properly validating a price. This makes it possible for unauthenticated attackers to manipulate the price of bookings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 5.8.1 |
Related
wordfence
wordfence