Security Advisory

CVE-2023-5651

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-20 18:55:08

Last updated 2024-10-01 14:31:01

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a package, allowing any authenticated users, such as subscriber to delete arbitrary posts

← Browse all CVEs View on cve.org ↗