WP Hotel Booking < 2.0.8 - Unauthenticated SQLi
30Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 64%
probabilidade de exploração
64%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections
Produtos afetados
Unknown · WP Hotel Booking