Booking and Rental Manager

Booking and Rental Manager through 2.7.7 allows a low-privilege authenticated user to store script-capable content. The payload can execute in the site's origin when another user views the affected booking or rental output.

Booking and Rental Manager through 2.7.6 allows a Subscriber to invoke an integrity-changing operation without the required authorization. The account can alter protected booking or plugin state outside its intended access.

Booking and Rental Manager is affected by code execution. Exploitation requires an authenticated contributor account. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is n/a through 2.7.5.

Booking and Rental Manager through 2.7.5 exposes an operation without the authorization it requires. An unauthenticated requester can obtain protected data, and the CNA rates confidentiality impact as low.

Booking and Rental Manager through 2.7.2 accepts attacker-controlled pricing input through an unauthenticated booking or rental flow without enforcing the server-authorized amount. An attacker can manipulate a transaction price.

Booking and Rental Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.6.9.

Booking and Rental Manager is affected by broken access control. The vulnerable path is reachable without authentication. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The published affected range is n/a through 2.7.1.

Booking and Rental Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.6.0.

Booking and Rental Manager is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

Booking and Rental Manager is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

Booking and Rental Manager is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

Booking and Rental Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

Booking and Rental Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

Booking and Rental Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

Booking and Rental Manager is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

Booking and Rental Manager is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

Booking and Rental Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

Booking And Rental Manager For Woocommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.