CVE-2026-9822
2026-06-19
06h00 +00:00
06h00 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
WP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX Handlers
The WP Hotel Booking WordPress plugin before 2.3.1 does not enforce capability checks in several of its AJAX handlers, allowing authenticated users with Subscriber-level access to read other users' booking line items, enumerate active coupons, and read pricing data.CVE 信息
参考资料
https://wpscan.com/vulnerability/107fe41a-c5d9-4547-b413-bbd77cbab986/
Tags : exploit, vdb-entry, technical-description
Tags : exploit, vdb-entry, technical-description
