Security Advisory
CVE-2023-5651
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a package, allowing any authenticated users, such as subscriber to delete arbitrary posts