Chauffeur Booking System Vulnerabilities

The Chauffeur Taxi Booking System for WordPress plugin for WordPress is vulnerable to authenticated bypass in all versions up to, and including, 6.9. This is due to the plugin not properly validating a user's identity. This makes it possible for unauthenticated attackers to perform unauthorized actions.

CVSS:

9.1

Affected:

up to 6.9

Fixed in:

7.0

Disclosed:

May 19, 2024

CVE-2024-32692 on NVD →

The Chauffeur Taxi Booking System for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 7.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote c...

CVSS:

10

Affected:

up to 7.2

Fixed in:

7.3

Disclosed:

Mar 29, 2024

CVE-2024-31115 on NVD →