WordPress Plugin Vulnerabilities

Appointment Hour Booking < 1.4.57 - Captcha Bypass

Description

The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.4.56. This makes it possible for unauthenticated attackers to bypass the Captcha Verification.

Affects Plugins

Plugin icon
appointment-hour-booking
Fixed in 1.4.57

References

CVE
CVE-2024-32720
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/c6a3ae10-843f-484a-ad6c-221ffece7cc2

Miscellaneous

Original Researcher
Mochamad Sofyan
Verified
No
WPVDB ID
312f914f-044b-487e-a4a6-b27a84bda497

Timeline

Publicly Published
2024-04-22 (about 2 years ago)
Added
2024-05-03 (about 2 years ago)
Last Updated
2024-05-03 (about 2 years ago)

Other

Published
Title
Published
2015-03-12
Title
Custom Field Suite <= 2.4 - Insufficient Authorisation
Published
2024-11-20
Title
Lock User Account <= 1.0.5 - User Lock Bypass
Published
2020-03-18
Title
Gutenberg & Elementor Templates Importer For Responsive < 2.2.6 - Unprotected AJAX Endpoints
Published
2020-08-13
Title
Quiz and Survey Master < 7.0.1 - Unauthenticated Arbitrary File Deletion
Published
2019-12-19
Title
301 Redirects - Easy Redirect Manager < 2.45 - Authenticated Arbitrary Redirect Injection and Modification, XSS, and CSRF