Unscored CVE-2019-12239 EUVD-2019-3884GHSA-m27g-fr8f-5p8f

The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that …

Published May 20, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access.

References

http://dumpco.re/bugs/wp-plugin-wp-booking-system-sqli
https://wordpress.org/plugins/wp-booking-system/#developers
https://wpvulndb.com/vulnerabilities/9284