CVE-2020-36757: CSRF
First published: Wed Jul 12 2023(Updated: )
The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.10.1. This is due to missing or incorrect nonce validation on the admin_add_order_item() function. This makes it possible for unauthenticated attackers to add an order item via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Credit: security@wordfence.com security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Thimpress Wp Hotel Booking | <=1.10.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/
- https://blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/
- https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
- https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
- https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/
- https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
- https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2368289%40wp-hotel-booking&new=2368289%40wp-hotel-booking&sfp_email=&sfph_mail=
- https://www.wordfence.com/threat-intel/vulnerabilities/id/dd9826d7-f8f5-4d3d-8145-3d4e6a63d784?source=cve
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-36757.
What is the severity of CVE-2020-36757?
The severity of CVE-2020-36757 is medium (4).
How does the WP Hotel Booking plugin for WordPress become vulnerable?
The WP Hotel Booking plugin for WordPress becomes vulnerable due to missing or incorrect nonce validation on the admin_add_order_item() function.
What is the affected software version?
The affected software version is up to, and including, 1.10.1.
How can the vulnerability be fixed?
To fix the vulnerability, it is recommended to update the WP Hotel Booking plugin for WordPress to a version higher than 1.10.1.
- collector/nvd-api
- collector/nvd-latest
- collector/nvd-index
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/thimpress
- canonical/thimpress wp hotel booking
- version/thimpress wp hotel booking/1.10.1