Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Thimpress Subscribe
Filtered by product Wp Hotel Booking
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-36852 1 Thimpress 1 Wp Hotel Booking 2022-08-23 N/A 8.0 HIGH
Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.
CVE-2020-29047 1 Thimpress 1 Wp Hotel Booking 2021-03-10 7.5 HIGH 9.8 CRITICAL
The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php.