Skip to content
OpenAdvisories

Vendor

chuhpl

2 known vulnerabilities.

Products

Book a Room Event Calendar 1 Book a Room 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-9721

    Book a Room Event Calendar <= 1.9 - Cross-Site Request Forgery to Settings Update

    The Book a Room Event Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9. This is due to missing or incorrect nonce validation on the settings_form()/update_settings() functionality. The plugin'…

    chuhpl Book a Room Event Calendar Web / CMS
  • Medium 4.3
    CVE-2024-13437

    Book a Room <= 2.9 - Cross-Site Request Forgery to Settings Update

    The Book a Room plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9. This is due to missing or incorrect nonce validation on the 'bookaroom_Settings' page. This makes it possible for unauthenticated attac…

    chuhpl Book a Room Web / CMS