{"id":"CVE-2023-1977","aliases":["EUVD-2023-24157","GHSA-5q6h-8rcf-7phv"],"status":"published","title":"Booking Manager \u003c 2.0.29 - Subscriber+ SSRF","description":"The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00823,"percentile":0.57602,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-918"],"published":"2023-08-16T11:03:28Z","modified":"2026-06-17T05:29:10Z","products":[{"vendor":"oplugins","product":"booking_manager"},{"vendor":"unknown","product":"booking manager"},{"vendor":"wpdevelop","product":"booking manager"}],"references":[{"url":"https://wpscan.com/vulnerability/842f3b1f-395a-4ea2-b7df-a36f70e8c790","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1977"},{"url":"https://github.com/advisories/GHSA-5q6h-8rcf-7phv"}],"sources":{"cve":[{"id":"CVE-2023-1977","title":"Booking Manager \u003c 2.0.29 - Subscriber+ SSRF","description":"The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.","status":"published","published":"2023-08-16T11:03:28.672Z","modified":"2024-10-08T19:08:16.135Z","updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-24157","description":"The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.","status":"published","published":"2023-08-16T11:03:28Z","modified":"2024-10-08T19:08:16Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"none"}],"updated_at":"2026-11-03T00:27:44.844048Z"}],"ghsa":[{"id":"GHSA-5q6h-8rcf-7phv","title":"The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin...","description":"The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.","status":"published","published":"2023-08-16T12:30:55Z","modified":"2024-04-04T06:59:17Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:56:47.648865Z"}],"nvd":[{"id":"CVE-2023-1977","description":"The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.","status":"published","published":"2023-08-16T12:15:12.51Z","modified":"2026-06-17T05:29:10.96Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:08:24.487686Z"}]}}