Vulnerability · Published Dec 26, 2023 · Assigned by WPScan
CVE-2023-5991Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion
Critical 9.8
In plain English
A critical-severity security flaw in Hotel Booking Lite from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.3% (higher than 89% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)3.3%top 11.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Nuclei
Official description
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Hotel Booking Lite | 0 – before 4.8.5 |
References
- https://wpscan.com/vulnerability/e9d35e36-1e60-4483-b8b3-5cbf08fcd49e exploit, vdb-entry, technical-description