Description
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Booking Ultra Pro | Booking Ultra Pro (WordPress plugin) | <= 1.1.4 – ≤ 1.1.4 | — |
Medium · 5.4
CVE-2021-36854
EUVD-2021-23430GHSA-vr32-696f-rxpr
WordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Published Sep 30, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack