← CVE Intelligence

CVE-2023-5799

WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion PUBLISHED

Description (CNA)

The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them

Affected (CNA)

Vendor / productVersions
Unknown / WP Hotel Bookingaffected 0 before 2.0.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.