Descripción
The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a booking, and relies on client-controlled cart data, allowing unauthenticated users to create confirmed reservations for free or at an arbitrarily reduced price.
CVSS 5.3EPSS 0.23600000000000002%Riesgo 0.54
Ver fuente- Publicación
- 2026-08-06 22:16:47
- Última modificación
- 2026-08-07 15:16:58
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N