Unrated severityNVD Advisory· Published Jan 17, 2025· Updated Apr 8, 2026
WP Hotel Booking <= 2.1.5 - Missing Authorization
CVE-2024-12370
Description
The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=2.1.5+ 1 more
- (no CPE)range: <=2.1.5
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.