Orta CVSS 4.3
CVE-2026-84167: CVE-2026-84167: güvenlik açığı
Açıklama (NVD)
The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authenticated user such as a Subscriber to read other customers' booking details, including their name, email address, phone number and postal address, by referencing an identifier they do not own.
Özet bilgiler
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,17 (yüzdelik 6)
- CWE
- CWE-639
- Yama
- Yok / bilinmiyor