Security
فارسی
All products

wp-hotel-booking

WordPress · Plugin
28 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Hotel Booking <= 2.3.1 - Unauthenticated Payment BypassCVE-2026-15152 wp-hotel-booking WordPress Medium Fix reported
Hotel Booking <= 2.3.2 - Unauthenticated Price ManipulationCVE-2026-15149 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking < 2.3.2 - Authenticated (Custom role+) SQL InjectionCVE-2026-15153 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode AttributeCVE-2026-15464 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' ParameterCVE-2026-15094 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN HandlerCVE-2026-11901 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' ParametersCVE-2026-11392 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking < 2.3.1 - Missing AuthorizationCVE-2026-9822 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.2.9 - Authenticated (Contributor+) Local File InclusionCVE-2024-51582 wp-hotel-booking WordPress High Fix reported
Hotel Booking <= 2.2.8 - Authenticated (Editor+) Stored Cross-Site ScriptingCVE-2025-63011 wp-hotel-booking WordPress Medium Fix reported
Hotel Booking <= 2.2.8 - Cross-Site Request ForgeryCVE-2025-63012 wp-hotel-booking WordPress Medium Fix reported
Hotel Booking <= 2.2.7 - Unauthenticated Information ExposureCVE-2025-63013 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' ParameterCVE-2025-14075 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.2.1 - Improper Input Validation to Authenticated (Subscriber+) Rating ManipulationCVE-2025-8942 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.1.9 - Cross-Site Request ForgeryCVE-2025-47448 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email RetrievalCVE-2024-13447 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.1.5 - Missing AuthorizationCVE-2024-12370 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.0.7 - Missing Authorization to (Subscriber+) Arbitrary Post DeletionCVE-2023-5651 wp-hotel-booking WordPress Medium Fix reported
WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-7855 wp-hotel-booking WordPress High Fix reported
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL InjectionCVE-2024-3605 wp-hotel-booking WordPress Critical Fix reported