CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-36757

The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.10.1. This is due to missing or incorrect nonce validation on the admin_add_order_item() function. This makes it possible for unauthenticated attackers to add an order item via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 34.8%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2020-36757

Thimpress » Wp Hotel Booking » Version: N/A

cpe:2.3:a:thimpress:wp_hotel_booking:-
Thimpress » Wp Hotel Booking » Version: 1.0

cpe:2.3:a:thimpress:wp_hotel_booking:1.0
Thimpress » Wp Hotel Booking » Version: 1.0.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.0.1
Thimpress » Wp Hotel Booking » Version: 1.0.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.0.2
Thimpress » Wp Hotel Booking » Version: 1.0.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.0.3
Thimpress » Wp Hotel Booking » Version: 1.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.1
Thimpress » Wp Hotel Booking » Version: 1.1.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.1.1
Thimpress » Wp Hotel Booking » Version: 1.1.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.1.2
Thimpress » Wp Hotel Booking » Version: 1.1.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.1.3
Thimpress » Wp Hotel Booking » Version: 1.1.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.1.4
Thimpress » Wp Hotel Booking » Version: 1.1.4.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.1.4.1
Thimpress » Wp Hotel Booking » Version: 1.1.5.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.1.5.1
Thimpress » Wp Hotel Booking » Version: 1.1.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.1.6
Thimpress » Wp Hotel Booking » Version: 1.1.6.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.1.6.1
Thimpress » Wp Hotel Booking » Version: 1.10.0

cpe:2.3:a:thimpress:wp_hotel_booking:1.10.0
Thimpress » Wp Hotel Booking » Version: 1.10.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.10.1
Thimpress » Wp Hotel Booking » Version: 1.6.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.6.2
Thimpress » Wp Hotel Booking » Version: 1.6.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.6.3
Thimpress » Wp Hotel Booking » Version: 1.6.3.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.6.3.1
Thimpress » Wp Hotel Booking » Version: 1.6.3.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.6.3.2
Thimpress » Wp Hotel Booking » Version: 1.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.7
Thimpress » Wp Hotel Booking » Version: 1.7.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.1
Thimpress » Wp Hotel Booking » Version: 1.7.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.2
Thimpress » Wp Hotel Booking » Version: 1.7.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.3
Thimpress » Wp Hotel Booking » Version: 1.7.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.4
Thimpress » Wp Hotel Booking » Version: 1.7.5

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.5
Thimpress » Wp Hotel Booking » Version: 1.7.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6
Thimpress » Wp Hotel Booking » Version: 1.7.6.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.1
Thimpress » Wp Hotel Booking » Version: 1.7.6.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.2
Thimpress » Wp Hotel Booking » Version: 1.7.6.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.3
Thimpress » Wp Hotel Booking » Version: 1.7.6.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.4
Thimpress » Wp Hotel Booking » Version: 1.7.6.5

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.5
Thimpress » Wp Hotel Booking » Version: 1.7.6.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.6
Thimpress » Wp Hotel Booking » Version: 1.7.6.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.7
Thimpress » Wp Hotel Booking » Version: 1.7.6.8

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.8
Thimpress » Wp Hotel Booking » Version: 1.7.6.9

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.6.9
Thimpress » Wp Hotel Booking » Version: 1.7.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.7
Thimpress » Wp Hotel Booking » Version: 1.7.8

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8
Thimpress » Wp Hotel Booking » Version: 1.7.8.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.1
Thimpress » Wp Hotel Booking » Version: 1.7.8.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.2
Thimpress » Wp Hotel Booking » Version: 1.7.8.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.3
Thimpress » Wp Hotel Booking » Version: 1.7.8.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.4
Thimpress » Wp Hotel Booking » Version: 1.7.8.5

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.5
Thimpress » Wp Hotel Booking » Version: 1.7.8.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.6
Thimpress » Wp Hotel Booking » Version: 1.7.8.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.7
Thimpress » Wp Hotel Booking » Version: 1.7.8.8

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.8
Thimpress » Wp Hotel Booking » Version: 1.7.8.9

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.8.9
Thimpress » Wp Hotel Booking » Version: 1.7.9

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9
Thimpress » Wp Hotel Booking » Version: 1.7.9.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.1
Thimpress » Wp Hotel Booking » Version: 1.7.9.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.2
Thimpress » Wp Hotel Booking » Version: 1.7.9.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.3
Thimpress » Wp Hotel Booking » Version: 1.7.9.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.4
Thimpress » Wp Hotel Booking » Version: 1.7.9.5

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.5
Thimpress » Wp Hotel Booking » Version: 1.7.9.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.6
Thimpress » Wp Hotel Booking » Version: 1.7.9.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.7
Thimpress » Wp Hotel Booking » Version: 1.7.9.8

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.8
Thimpress » Wp Hotel Booking » Version: 1.7.9.9

cpe:2.3:a:thimpress:wp_hotel_booking:1.7.9.9
Thimpress » Wp Hotel Booking » Version: 1.8

cpe:2.3:a:thimpress:wp_hotel_booking:1.8
Thimpress » Wp Hotel Booking » Version: 1.8.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.1
Thimpress » Wp Hotel Booking » Version: 1.8.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.2
Thimpress » Wp Hotel Booking » Version: 1.8.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.3
Thimpress » Wp Hotel Booking » Version: 1.8.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.4
Thimpress » Wp Hotel Booking » Version: 1.8.5

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.5
Thimpress » Wp Hotel Booking » Version: 1.8.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.6
Thimpress » Wp Hotel Booking » Version: 1.8.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.7
Thimpress » Wp Hotel Booking » Version: 1.8.8

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.8
Thimpress » Wp Hotel Booking » Version: 1.8.9

cpe:2.3:a:thimpress:wp_hotel_booking:1.8.9
Thimpress » Wp Hotel Booking » Version: 1.9

cpe:2.3:a:thimpress:wp_hotel_booking:1.9
Thimpress » Wp Hotel Booking » Version: 1.9.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.1
Thimpress » Wp Hotel Booking » Version: 1.9.10

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.10
Thimpress » Wp Hotel Booking » Version: 1.9.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.2
Thimpress » Wp Hotel Booking » Version: 1.9.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.3
Thimpress » Wp Hotel Booking » Version: 1.9.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.4
Thimpress » Wp Hotel Booking » Version: 1.9.5

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.5
Thimpress » Wp Hotel Booking » Version: 1.9.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.6
Thimpress » Wp Hotel Booking » Version: 1.9.6.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.6.1
Thimpress » Wp Hotel Booking » Version: 1.9.6.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.6.2
Thimpress » Wp Hotel Booking » Version: 1.9.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7
Thimpress » Wp Hotel Booking » Version: 1.9.7.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.1
Thimpress » Wp Hotel Booking » Version: 1.9.7.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.2
Thimpress » Wp Hotel Booking » Version: 1.9.7.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.3
Thimpress » Wp Hotel Booking » Version: 1.9.7.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.4
Thimpress » Wp Hotel Booking » Version: 1.9.7.5

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.5
Thimpress » Wp Hotel Booking » Version: 1.9.7.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.6
Thimpress » Wp Hotel Booking » Version: 1.9.7.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.7
Thimpress » Wp Hotel Booking » Version: 1.9.7.8

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.8
Thimpress » Wp Hotel Booking » Version: 1.9.7.9

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.7.9
Thimpress » Wp Hotel Booking » Version: 1.9.8

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.8
Thimpress » Wp Hotel Booking » Version: 1.9.8.1

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.8.1
Thimpress » Wp Hotel Booking » Version: 1.9.8.2

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.8.2
Thimpress » Wp Hotel Booking » Version: 1.9.8.3

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.8.3
Thimpress » Wp Hotel Booking » Version: 1.9.8.4

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.8.4
Thimpress » Wp Hotel Booking » Version: 1.9.8.5

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.8.5
Thimpress » Wp Hotel Booking » Version: 1.9.8.6

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.8.6
Thimpress » Wp Hotel Booking » Version: 1.9.8.7

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.8.7
Thimpress » Wp Hotel Booking » Version: 1.9.9

cpe:2.3:a:thimpress:wp_hotel_booking:1.9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-36757

Products

Pricing

Contact Us