Wp Hotel Booking
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_hotel_booking:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Hotel Booking (31718306-9066-5c09-bb3b-a87f00a41952) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8942 |
vulnerable | 2026-06-08 07:45:21.483975 |
WP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation
The WP Hotel Booking WordPress plugin before 2.2.3 lacks proper server-side validation for review ratings, allowing an attacker to manipulate the rating value (e.g., sending negative or out-of-range values) by intercepting and modifying requests.
Published: 2025-09-18T06:00:05.997Z
Updated: 2025-09-22T17:27:30.847Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5799 |
vulnerable | 2026-06-08 06:19:44.785951 |
WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion
The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them
Published: 2023-11-20T18:55:07.999Z
Updated: 2024-08-02T08:14:24.001Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5652 |
vulnerable | 2026-06-08 06:19:44.378356 |
WP Hotel Booking < 2.0.8 - Unauthenticated SQLi
The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections
Published: 2023-11-20T18:55:06.152Z
Updated: 2024-08-02T08:07:32.460Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5651 |
vulnerable | 2026-06-08 06:19:44.376933 |
WP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post Deletion
The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a package, allowing any authenticated users, such as subscriber to delete arbitrary posts
Published: 2023-11-20T18:55:08.790Z
Updated: 2024-10-01T14:31:01.633Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.