Skip to content
OpenAdvisories

Vendor

caagsoftware

1 known vulnerabilities.

Products

HQ Rental Software 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-11689

    HQ Rental Software <= 1.5.29 - Cross-Site Request Forgery to Arbitrary Options Update

    The HQ Rental Software plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.29. This is due to missing or incorrect nonce validation on the displaySettingsPage() function. This makes it possible for unauth…

    caagsoftware HQ Rental Software Web / CMS