PT-2019-12710 · WordPress · Wp Booking System

CVE-2019-12239 · Published 2019-05-20 · Updated 2023-02-24

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP Booking System plugin version 1.5.1

Description The issue is related to the lack of CSRF protection, which can allow attackers to exploit certain SQL injection issues that require administrative access.

Recommendations For WP Booking System plugin version 1.5.1, consider implementing CSRF protection measures to prevent exploitation of SQL injection issues until a patch is available.

Exploit

Fix

CSRF

SQL injection

Weakness Enumeration

CWE-352

CWE-89

Related Identifiers

CVE-2019-12239

Affected Products

Wp Booking System

References · 5

• 🔥 http://dumpco.re/bugs/wp-plugin-wp-booking-system-sqli · Exploit
• https://osv.dev/vulnerability/CVE-2019-12239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12239 · Security Note
• https://wordpress.org/plugins/wp-booking-system/#developers · Note
• https://wpvulndb.com/vulnerabilities/9284 · Note