CVE-2023-5652

CRITICALNuclei

WP Hotel Booking < 2.0.8 - Unauthenticated SQLi

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-5652 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

WP Hotel Booking

Default status: unaffected

CVE ListBefore 2.0.8affected

Nuclei templates

1
ProjectDiscoveryCRITICALWP Hotel Booking <= 2.0.7 - SQL InjectionCVSS 9.8

WP Hotel Booking WordPress plugin before 2.0.8 contains a SQL injection caused by lack of authorization, CSRF checks, and input escaping in a function hooked to admin_init, letting unauthenticated users perform SQL injections, exploit requires no authentication.

Impact

Unauthenticated attackers can execute arbitrary SQL commands, potentially leading to data theft, modification, or deletion.

Remediation

Update to version 2.0.8 or later.

WeaknessesCWE-89
AuthorsShivam Kamboj, s4e-io
Template tagscvecve2023wordpresswpwp-pluginsqliwp-hotel-bookingunauth
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-hotel-booking/wp-hotel-booking-207-unauthenticated-sql-injection https://nvd.nist.gov/vuln/detail/CVE-2023-5652

Source: ProjectDiscovery

References

2