Critical severity9.8NVD Advisory· Published Dec 26, 2023· Updated Jun 17, 2026
CVE-2023-5991
CVE-2023-5991
Description
The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:motopress:hotel_booking_lite:*:*:*:*:*:wordpress:*:*Range: <4.8.5
- WordPress/Hotel Booking Lite WordPress plugindescription
- Range: <4.8.5
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e9d35e36-1e60-4483-b8b3-5cbf08fcd49envdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.