← Back

Hotel Booking Lite

hotel_booking_lite

Vendor: Motopress • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5991
1Motopress
1Hotel Booking Lite
Nov 21, 2024
Dec 26, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and del...Show more
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the serverShow less
CVE-2023-28498
1Motopress
1Hotel Booking Lite
Nov 21, 2024
Nov 12, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions.