Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:34:12 +0000 CVE-2023-5991 — Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion https://cve.radiocsirt.org/vuln/cve-2023-5991 <p><strong>Affected:</strong> Unknown Hotel Booking Lite</p> <p>The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server</p> <p><strong>Affected:</strong> Unknown Hotel Booking Lite</p> <p>The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server</p> https://cve.radiocsirt.org/vuln/cve-2023-5991