WP Hotel Booking < 2.3.2 - Unauthenticated PayPal Payment Bypass
30Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3
exploitation probability
—
observed exploitation
nono source reports it
1 public exploit(s)
The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site's own merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to have their bookings marked as fully paid without any payment reaching the site owner.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Unknown · WP Hotel Bookingpublic PoCs found — 1
cve_referencewpscan.com/vulnerability/e2435361-0a2a-4914-b4d8-7fb28386c4d3/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.