high7.2
CVE-2019-12239
The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrati…
Impact
The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpbookingsystem | Wp Booking System | before 1.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dumpco.re/bugs/wp-plugin-wp-booking-system-sqli
- https://wordpress.org/plugins/wp-booking-system/#developers
- https://wpvulndb.com/vulnerabilities/9284
- http://dumpco.re/bugs/wp-plugin-wp-booking-system-sqli
- https://wordpress.org/plugins/wp-booking-system/#developers
- https://wpvulndb.com/vulnerabilities/9284