Description
WordPress Plugin WP Hotel Booking is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin WP Hotel Booking version 1.10.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.10.6 or latest
References
Related Vulnerabilities
WordPress Plugin Woocommerce Categories in gallery format Cross-Site Scripting (1.0.1)
WordPress Plugin WP-ViperGB Cross-Site Scripting (1.3.15)
WordPress Plugin SEO Redirection-301 Redirect Manager SQL Injection (8.1)
WordPress Plugin DOP Slider Arbitrary File Upload (1.0)
PrestaShop Improper Authentication Vulnerability (CVE-2020-15079)