Aller au contenu
Se connecter
6.5 Moyenne

CVE-2023-1129 The WP FEvents Book WordPress plugin through 0.46 does not ensures that bookings to be updated belong to the user making…

Description

The WP FEvents Book WordPress plugin through 0.46 does not ensures that bookings to be updated belong to the user making the request, allowing any authenticated user to book, add notes, or cancel booking on behalf of other users.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP FEvents Book 0.46 premières → 0.46 Pas de correctif indiqué

Autres CVE de WP FEvents Book

Les 2 CVE de WP FEvents Book →
CVE-2023-1126 The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any… 5.4 Moyenne
Suivre cette CVE