Description
Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThimPress | WP Hotel Booking | <= 1.10.5 – ≤ 1.10.5 | — |
Medium · 4.3
CVE-2021-36852
EUVD-2021-23428GHSA-v9gp-cm5m-f2c5
WordPress WP Hotel Booking plugin <= 1.10.5 - Cross-Site Request Forgery (CSRF) vulnerability
Published Aug 22, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack