CVE-2024-32720
WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56.
La vulnerabilidad de restricción incorrecta de intentos de autenticación excesivos en CodePeople Appointment Hour Booking permite eliminar funciones importantes del cliente. Este problema afecta a Appointment Hour Booking: desde n/a hasta 1.4.56.
The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.4.56. This makes it possible for unauthenticated attackers to bypass the Captcha Verification.
*Credits:
Mochamad Sofyan (Patchstack Alliance)
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-04-17 CVE Reserved
- 2024-04-22 CVE Published
- 2024-05-18 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-307: Improper Restriction of Excessive Authentication Attempts
- CWE-804: Guessable CAPTCHA
CAPEC
- CAPEC-207: Removing Important Client Functionality
References (1)
| URL | Tag | Source |
|---|---|---|
| https://patchstack.com/database/vulnerability/appointment-hour-booking/wordpress-appointment-hour-booking-plugin-1-4-56-captcha-bypass-vulnerability?_s_id=cve | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Appointment Hour Booking Search vendor "Appointment Hour Booking" | Appointment Hour Booking Search vendor "Appointment Hour Booking" for product "Appointment Hour Booking" | >= 0.0.0 <= 1.4.56 Search vendor "Appointment Hour Booking" for product "Appointment Hour Booking" and version " >= 0.0.0 <= 1.4.56" | en |
Affected
| ||||||