Vulnerabilities and Security Researches

WP Booking System – Booking Calendar, CVE-2019-12239

CVE, Research URL: CVE-2019-12239
Home page URL: Security reports for WP Booking System – Booking Calendar
Application: WP Booking System – Booking Calendar
Published on: May 21, 2019
Research Description: The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access.
Affected versions: max 1.5.2.
Status: vulnerable