The WP Hotel Booking WordPress plugin before 2.2.3 lacks proper server-side validation for review ratings, allowing an attacker to manipulate the rating value (e.g., sending negative or out-of-range values) by intercepting and modifying requests.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 18 Sep 2025 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The WP Hotel Booking WordPress plugin before 2.2.3 lacks proper server-side validation for review ratings, allowing an attacker to manipulate the rating value (e.g., sending negative or out-of-range values) by intercepting and modifying requests. | |
| Title | WP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2025-09-18T06:00:05.997Z
Reserved: 2025-08-13T13:29:40.471Z
Link: CVE-2025-8942
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-09-18T06:15:35.053
Modified: 2025-09-18T06:15:35.053
Link: CVE-2025-8942
Redhat
No data.
OpenCVE Enrichment
No data.