Threats tagged 'ghsa-9rjp-x5g7-g983'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-15149WP Hotel Booking · Improper Input Validation Medium5.3EPSS 0.3%2026-08-06CVE Database V5CVE-2026-15149 CVE-2026-15149 is a medium severity vulnerability in the WP Hotel Booking WordPress plugin before version 2.3.3. The plugin does not properly validate that room quantities and order totals are non-negative during booking. It relies on client-controlled cart data, which allows unauthenticated users to create confirmed reservations for free or at a reduced price. EPSS 0.3%Vulnerability CWE-20 #ghsa-9rjp-x5g7-g983	CVE Database V5	2026-08-06

Page 1 of 1