First published: Tue Sep 06 2022(Updated: )
Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
Wpbookingcalendar Booking Calendar | <=9.2.1 |
Update to 9.2.2 or higher version.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-33177 is medium with a severity value of 4.3.
CVE-2022-33177 affects WPdevelop/Oplugins Booking Calendar plugin version 9.2.1 and earlier.
The impact of CVE-2022-33177 is a Cross-Site Request Forgery (CSRF) vulnerability in the WPdevelop/Oplugins Booking Calendar plugin.
To fix CVE-2022-33177, update the WPdevelop/Oplugins Booking Calendar plugin to version 9.2.2 or later.
You can find more information about CVE-2022-33177 at the following references: [PatchStack](https://patchstack.com/database/vulnerability/booking/wordpress-booking-calendar-plugin-9-2-1-cross-site-request-forgery-csrf-leading-to-translations-update/_s_id=cve) and [WordPress.org](https://wordpress.org/plugins/booking/#developers).