Hotel Booking Lite vulnerabilities
We track 1 vulnerability in Hotel Booking Lite products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 26, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Hotel Booking Lite vulnerabilities
- 9.8 Critical severity
Hotel Booking Lite: Improper Limitation of a Pathname to a Restricted Directory
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server