Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-29047 1 Thimpress 1 Wp Hotel Booking 2024-11-21 9.8 Critical
The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php.
CVE-2024-51582 1 Thimpress 1 Wp Hotel Booking 2024-11-06 7.5 High
Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking allows PHP Local File Inclusion.This issue affects WP Hotel Booking: from n/a through 2.1.4.