CVE-2023-1977: fallo en Booking Manager
Booking Manager < 2.0.29 - Subscriber+ SSRF
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.8%
The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.
Productos afectados
Unknown · Booking ManagerCVEs relacionadas — Booking Manager
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-91024MEDIUMBooking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid)EPSS 0.4%CVE-2025-10124MEDIUMBooking Manager < 2.1.15 - Contributor+ Booking DeletionEPSS 0.3%CVE-2026-91025MEDIUMBooking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOREPSS 0.3%