CyberRota
← Ana sayfaya dön

CVE-2026-15153

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-30T06:25:01.330 · Çekilme zamanı: 2026-07-30T12:08:54.901053+00:00

CyberRota Yorumu

SQL Injection riski içeriyor.

CVE
CVE-2026-15153
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks.