CVE-2020-36757: WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass
The WP Hotel Booking plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.10.1. This is due to missing or incorrect nonce validation on the adminaddorderitem() function. This makes it possible for unauthenticated attackers to add an order item via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-36757.
What is the severity of CVE-2020-36757?
The severity of CVE-2020-36757 is medium (4).
How does the WP Hotel Booking plugin for WordPress become vulnerable?
The WP Hotel Booking plugin for WordPress becomes vulnerable due to missing or incorrect nonce validation on the admin_add_order_item() function.
What is the affected software version?
The affected software version is up to, and including, 1.10.1.
How can the vulnerability be fixed?
To fix the vulnerability, it is recommended to update the WP Hotel Booking plugin for WordPress to a version higher than 1.10.1.