CVE-2020-29047
First published: Wed Mar 03 2021(Updated: )
The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Thimpress Wp Hotel Booking | <=1.10.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2020-29047.
What is the severity level of CVE-2020-29047?
The severity level of CVE-2020-29047 is critical with a score of 9.8.
How does the wp-hotel-booking plugin through 1.10.2 for WordPress allow attackers to execute arbitrary code?
The wp-hotel-booking plugin allows attackers to execute arbitrary code through an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php.
What is the affected software by CVE-2020-29047?
The affected software is the wp-hotel-booking plugin through version 1.10.2 for WordPress.
How can I fix the vulnerability CVE-2020-29047?
To fix the vulnerability, update to a version of the wp-hotel-booking plugin that is newer than 1.10.2.
- collector/nvd-index
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/description
- agent/event
- vendor/thimpress
- canonical/thimpress wp hotel booking
- version/thimpress wp hotel booking/1.10.2