plugin

Simple Booking Widget Vulnerabilities

1 known security issue reported for the Simple Booking Widget WordPress plugin. Most recent disclosed Dec 12, 2024.

1 medium

Running Simple Booking Widget on your site? Check whether your installed version is affected.

Simple Booking Widget <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

medium

The Simple Booking – Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action granted they can trick a...

CVSS:: 6.1
Affected:: up to 1.1
Fix:: No patched version reported
Disclosed:: Dec 12, 2024

CVE-2024-54433 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database