CVE-2023-5652 (published 2023-11-20T18:55:06.152Z)
The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections
Affected products: Vendor: Unknown
Product: WP Hotel Booking
Versions: 0