Motopress Hotel Booking Lite
2 CVEs affecting Motopress Hotel Booking Lite. Latest disclosed: 2023-12-26. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5991 | Critical | 9.8 | 2023-12-26 | The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisati… |
CVE-2023-28498 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions. |