CVE-2024-12370 | BDVDB-2026-263248 Detail

Description#

The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-01-17Record published in the CVE List.
2. Version 22026-04-08Most recent update recorded in the CVE List.