Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-49966 EUVD-2025-28334GHSA-8v84-mv9p-rj4g

WordPress Oganro Travel Portal Search Widget for HotelBeds APITUDE API plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Published Jun 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Oganro Oganro Travel Portal Search Widget for HotelBeds APITUDE API oganro-travel-portal-search-widget-for-hotelbeds-apitude-api allows Cross Site Request Forgery.This issue affects Oganro Travel Portal Search Widget for HotelBeds APITUDE API: from n/a through <= 1.0.

Affected products

VendorProductAffectedFixed
Oganro Oganro Travel Portal Search Widget for HotelBeds APITUDE API ≤ 1.0 —

References