Lucene search
WPScanCVELIST:CVE-2022-4340HistoryJan 02, 2023 - 9:49 p.m.
CVE-2022-4340 BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
2023-01-0221:49:16
WPScan
www.cve.org
4
cve-2022-4340
bookingpress
unauthenticated
idor
wordpress
appointment_id
The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in it’s thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointment_id query parameter.
CNA Affected
[
{
"vendor": "Unknown",
"product": "BookingPress",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.0.31"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpexploit
wpexploit
BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
2022-12-07 00:00:00
cve
cve
CVE-2022-4340
2023-01-02 22:15:17
prion
prion
Information disclosure
2023-01-02 22:15:00
wpvulndb
wpvulndb
BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
2022-12-07 00:00:00
nvd
nvd
CVE-2022-4340
2023-01-02 22:15:17