Skip to content
OpenAdvisories

Archive

20 June 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2024-3605 Public exploit Scanner template

    WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

    The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/rooms/search-rooms REST API endpoint in all versions up to, and including, 2.1.0 due to insufficient escaping on the user supplied parameter…