Filtered by vendor Motopress Subscriptions
Filtered by product Hotel Booking Lite Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-28498 1 Motopress 1 Hotel Booking Lite 2024-08-30 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions.
CVE-2023-5991 1 Motopress 1 Hotel Booking Lite 2024-08-02 9.8 Critical
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server