CVE-2023-5799: falha em WP Hotel Booking
WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.5%
The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them
Produtos afetados
Unknown · WP Hotel BookingCVEs relacionadas — WP Hotel Booking
No mesmo produto, das mais perigosas para as menos.
CVE-2023-5652—WP Hotel Booking < 2.0.8 - Unauthenticated SQLiEPSS 63.7%CVE-2026-15153MEDIUMWP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List SearchEPSS 0.4%CVE-2026-9822MEDIUMWP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX HandlersEPSS 0.3%CVE-2026-15149MEDIUMWP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price ManipulationEPSS 0.3%CVE-2025-8942CRITICALWP Hotel Booking < 2.2.3 - Subscriber+ Rating ManipulationEPSS 0.3%CVE-2023-5651MEDIUMWP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post DeletionEPSS 0.3%