WP Hotel Booking, CVE-2024-12370

CVE, Research URL: CVE-2024-12370
Home page URL: Security reports for WP Hotel Booking
Application: WP Hotel Booking
Published on: Jan 17, 2025
Research Description: The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices.
Affected versions: max 2.1.6.
Status: vulnerable