CVE-2018-20556: SQL Injection
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-20556?
CVE-2018-20556 is rated as a critical vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2018-20556?
To fix CVE-2018-20556, update the Booking Calendar plugin to the latest version that addresses this SQL injection vulnerability.
What is the impact of CVE-2018-20556 on my WordPress site?
The impact of CVE-2018-20556 on your WordPress site can include unauthorized access to your database and the ability to manipulate or extract sensitive data.
Which versions of Booking Calendar are affected by CVE-2018-20556?
CVE-2018-20556 specifically affects version 8.4.3 of the Booking Calendar plugin for WordPress.
Who can exploit CVE-2018-20556?
CVE-2018-20556 can be exploited by remote attackers who can manipulate the booking_id parameter in a request to execute SQL commands.