WordPress security by component
OTA Sync Booking Engine Widget
Plugin description
OTA Sync Booking Engine Widget embeds an OTA Sync booking engine widget into WordPress websites.
OTA Sync Booking Engine Widget (ota-sync-booking-engine-widget) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 21, 2024; the highest published CVSS base score is 6.1.
Plugin slug:
ota-sync-booking-engine-widgetLatest vulnerability
CVE-2024-7647: OTA Sync Booking Engine Widget: Cross-site request forgery
OTA Sync Booking Engine Widget is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
| Safe version |
|
||
|---|---|---|---|
| Aug 21, 2024 |
CVE-2024-7647
OTA Sync Booking Engine Widget: Cross-site request forgery
OTA Sync Booking Engine Widget is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE6.1
NVDPending
|