Description
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/post/listing.
References (9)
Core 9
Core References
Third Party Advisory x_refsource_misc
https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727
Third Party Advisory x_refsource_misc
https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571
Third Party Advisory x_refsource_misc
https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622
Third Party Advisory x_refsource_misc
https://wpvulndb.com/vulnerabilities/10013
Third Party Advisory x_refsource_misc
https://wpvulndb.com/vulnerabilities/10014
Third Party Advisory x_refsource_misc
https://wpvulndb.com/vulnerabilities/10018
Exploit, Third Party Advisory x_refsource_misc
https://cxsecurity.com/issue/WLB-2019120111
Exploit, Third Party Advisory x_refsource_misc
https://cxsecurity.com/issue/WLB-2019120112
Exploit, Third Party Advisory x_refsource_misc
https://cxsecurity.com/issue/WLB-2019120110
Scores
CVSS v3
7.5
EPSS
0.0099
EPSS Percentile
77.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-639
CWE-79
Status
published
Products (3)
cththemes/citybook
< 2.3.4
cththemes/easybook
< 1.2.2
cththemes/townhub
< 1.0.6
Published
Jan 13, 2020
Tracked Since
Feb 18, 2026