Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-5652

The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections
Exploit prediction scoring system (EPSS) score
EPSS Score 0.185
EPSS Ranking 94.8%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2023-5652


Contact Us

Shodan ® - All rights reserved