Skip to content
Threat Feed
Subscribe

Product

Booking Package Plugin <= 1.7.20

1 brief RSS
high advisory

WordPress Booking Package Plugin Vulnerable to Unauthenticated SQL Injection

The Booking Package plugin for WordPress is vulnerable to unauthenticated generic SQL Injection via the 'email' form parameter in versions up to and including 1.7.20, allowing attackers to extract sensitive information from the database.

Booking Package plugin <= 1.7.20 wordpress sqli web-vulnerability cms
1t 1c