📦 Commonsbooking

This vulnerability allows unauthenticated attackers to execute arbitrary SQL commands on WordPress sites running vulnerable versions of the CommonsBooking plugin. Attackers can potentially read, modif...

This CSRF vulnerability in the CB (legacy) WordPress plugin allows attackers to trick logged-in administrators into performing unauthorized bulk actions like deleting codes, timeframes, and bookings. ...