TI-2023-00728 CVE-2023-0768 · GHSA-jj36-xcq2-26p9Avirato hotels online booking engine <= 5.0.5 - Subscriber+ SQLiPriority HIGH 73The Avirato hotels online booking engine WordPress plugin through 5.0.5 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such…CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2023-05-08 · No fix listed