Lucene search
WpvulndbWPVDB-ID:C7619434-BA7B-40A0-A532-717BEA736022HistoryNov 29, 2022 - 12:00 a.m.
Appointment Hour Booking < 1.3.73 - CAPTCHA Bypass
2022-11-2900:00:00
wpscan.com
9
captcha bypass
weak hashing algorithm
cookie vulnerability
security flaw
0.001 Low
EPSS
Percentile
35.0%
The plugin does not have a strong hashing algorithm on the CAPTCHA secret, and displays it to the user via a cookie, which could allow them to bypass the protection in place
| CPE | Name | Operator | Version |
|---|---|---|---|
| appointment-hour-booking | lt | 1.3.73 |
Related
cvelist
cvelist
CVE-2022-4036
2022-11-29 20:34:59
nvd
nvd
CVE-2022-4036
2022-11-29 21:15:12
cve
cve
CVE-2022-4036
2022-11-29 21:15:12
prion
prion
Design/Logic Flaw
2022-11-29 21:15:00
cnvd
cnvd
WordPress Appointment Hour Booking plugin weak algorithm vulnerability
2022-11-30 00:00:00
openvas
openvas
WordPress Appointment Hour Booking Plugin < 1.3.73 Multiple Vulnerabilities
2023-08-11 00:00:00