https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 19:59:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-282397 EUVD-2026-282397 https://cve.radiocsirt.org/vuln/euvd-2026-282397 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14075 <p>The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.7. This is due to the plugin exposing the &#39;hotel_booking_fetch_customer_info&#39; AJAX action to unauthenticated users without proper capability checks, relying only on a nonce for protection. This makes it possible for unauthenticated attackers to retrieve sensitive customer information including full names, addresses, phone numbers, and email addresses by providing a valid email address and a publicly accessible nonce.</p> <p>The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.7. This is due to the plugin exposing the &#39;hotel_booking_fetch_customer_info&#39; AJAX action to unauthenticated users without proper capability checks, relying only on a nonce for protection. This makes it possible for unauthenticated attackers to retrieve sensitive customer information including full names, addresses, phone numbers, and email addresses by providing a valid email address and a publicly accessible nonce.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14075 https://cve.radiocsirt.org/vuln/ghsa-p429-p65m-q8hj <p>The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.7. This is due to the plugin exposing the &#39;hotel_booking_fetch_customer_info&#39; AJAX action to unauthenticated users without proper capability checks, relying only on a nonce for protection. This makes it possible for unauthenticated attackers to retrieve sensitive customer information including full names, addresses, phone numbers, and email addresses by providing a valid email address and a publicly accessible nonce.</p> <p>The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.7. This is due to the plugin exposing the &#39;hotel_booking_fetch_customer_info&#39; AJAX action to unauthenticated users without proper capability checks, relying only on a nonce for protection. This makes it possible for unauthenticated attackers to retrieve sensitive customer information including full names, addresses, phone numbers, and email addresses by providing a valid email address and a publicly accessible nonce.</p> https://cve.radiocsirt.org/vuln/ghsa-p429-p65m-q8hj