Lucene search
WpvulndbWPVDB-ID:C7619434-BA7B-40A0-A532-717BEA736022HistoryNov 29, 2022 - 12:00 a.m.
Appointment Hour Booking < 1.3.73 - CAPTCHA Bypass
2022-11-2900:00:00
wpscan.com
10
captcha bypass
weak hashing algorithm
cookie vulnerability
security flaw
EPSS
0.001
Percentile
34.9%
The plugin does not have a strong hashing algorithm on the CAPTCHA secret, and displays it to the user via a cookie, which could allow them to bypass the protection in place
Related
cvelist
cvelist
CVE-2022-4036
2022-11-29 20:34:59
nvd
nvd
CVE-2022-4036
2022-11-29 21:15:12
cve
cve
CVE-2022-4036
2022-11-29 21:15:12
prion
prion
Design/Logic Flaw
2022-11-29 21:15:00
cnvd
cnvd
WordPress Appointment Hour Booking plugin weak algorithm vulnerability
2022-11-30 00:00:00
openvas
openvas
WordPress Appointment Hour Booking Plugin < 1.3.73 Multiple Vulnerabilities
2023-08-11 00:00:00