Description

WordPress Plugin Google Adsense and Hotel Booking is prone to an open proxy vulnerability. Exploiting this issue may allow attackers to hide attacks on third parties, or DoS a site if the POST request is pointed back at itself causing a loop. WordPress Plugin Google Adsense and Hotel Booking version 1.0.5 is vulnerable; prior versions are also affected.

Remediation

Disable the plugin until a fix is available

References

http://www.vapidlabs.com/advisory.php?v=151

Related Vulnerabilities

WordPress Plugin WonderPlugin Audio Player Multiple Vulnerabilities (2.0)

WordPress Plugin Influencer Marketing & Press Release System Cross-Site Scripting (2.2)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13447)

WordPress Plugin WP Customer Reviews Unspecified Vulnerability (3.0.7)

WordPress Plugin PayPal Digital Downloads Cross-Site Request Forgery (1.4)

Severity

High

Classification

CVE-2015-1000009 CWE-441 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update