https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:48:40 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2023-5652 <p>The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections</p> <p>The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections</p> https://vulnerability.circl.lu/vuln/fkie_cve-2023-5652 https://vulnerability.circl.lu/vuln/ghsa-6vrh-99q9-hcxv <p>The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections</p> <p>The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections</p> https://vulnerability.circl.lu/vuln/ghsa-6vrh-99q9-hcxv https://vulnerability.circl.lu/vuln/gsd-2023-5652 gsd-2023-5652 https://vulnerability.circl.lu/vuln/gsd-2023-5652