Input validation vulnerability in Hotel Booking 3.6

The Hotel Booking plugin for WordPress is not secure and can be easily hacked. This can happen through the nd_booking_ss_rooms() function in versions up to 3.6. This allows attackers with contributor-level access or higher to add and run any files on the server, which can contain harmful PHP code. This can lead to bypassing security measures, obtaining confidential information, or even executing code. Even if only “safe” files like images are uploaded, they can still be used for this attack.

Detected in:

Hotel Booking fixed vulnerable versions: >= * <= 3.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.