Security
فارسی
All products

hostel

WordPress · Plugin
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Hostel <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_currency' Parameter and Localization file URL SettingCVE-2026-1645 hostel WordPress Medium No fix reported
Hostel <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wphostel-book' ShortcodeCVE-2026-3907 hostel WordPress Medium Fix reported
Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' ParameterCVE-2026-1838 hostel WordPress Medium Fix reported
Hostel <= 1.1.5.9 - Reflected Cross-Site ScriptingCVE-2025-66119 hostel WordPress Medium Fix reported
Hostel <= 1.1.5.8 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-6236 hostel WordPress Medium Fix reported
Hostel <= 1.1.5.7 - Reflected Cross-Site ScriptingCVE-2025-6234 hostel WordPress Medium Fix reported
Hostel <= 1.1.5.6 - Authenticated (Administrator+) SQL InjectionCVE-2025-39566 hostel WordPress Medium Fix reported
Hostel <= 1.1.5 - Reflected Cross-Site ScriptingCVE-2025-30848 hostel WordPress Medium Fix reported
Hostel <= 1.1.5.5 - Reflected Cross-Site ScriptingCVE-2025-31102 hostel WordPress Medium Fix reported
Hostel <= 1.1.5.2 - Reflected Cross-Site ScriptingCVE-2024-3753 hostel WordPress Medium Fix reported
hostel <= 1.1.5.3 - Cross-Site Request ForgeryCVE-2024-4314 hostel WordPress Medium Fix reported
Hostel <= 1.1.5.1 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-0545 hostel WordPress Medium Fix reported
Hostel <= 1.1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Manage BookingsCVE-2023-32120 hostel WordPress Medium Fix reported
Hostel <= 1.1.3 - Stored Cross-Site ScriptingCVE-2019-12345 hostel WordPress High Fix reported