https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:40:53.212677+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-20243 CVE-2017-20243 — WordPress Car Park Booking Plugin SQL Injection via space_id 2026-10-07T06:40:53.230809+00:00

Affected: QuanticaLabs Car Park Booking System

WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the space_id parameter. Attackers can send GET requests to the booking-page endpoint with malicious space_id values using AND SLEEP() payloads to extract sensitive database information.