CultBooking Hotel Booking Engine
CultBooking Hotel Booking Engine has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for CultBooking Hotel Booking Engine has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by SOPROBRO. CultBooking Hotel Booking Engine is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.
CVE-2024-53753CultBooking Hotel Booking Engine <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records

CultBooking Hotel Booking Engine
Author
CultBooking
CultBooking Engine for WordPress is a powerful and easy-to-use plugin that allows you to manage your bookings and channels from your WordPress site. Whether you run a hotel, a vacation rental, a B&B, or any other accommodation type, CultBooking Engine can help you increase your direct bookings and revenue. With CultBooking Engine, you can create a customized booking button that matches your website’s design and style. You can also integrate with popular channel managers like Booking.com, Expedia, Airbnb, and more to sync your availability and rates across multiple platforms. You can access your admin dashboard from any device and manage your reservations, guests, payments, and reports with just a few clicks. CultBooking Engine is trusted by thousands of property owners around the world who use it to simplify their operations and grow their businesses. Here is an example of a website that uses CultBooking Engine technology: Bergmann Boardinghouse is a modern and comfortable apartment hotel in Osnabrück, Germany. CultBooking is PCI Compliant, 100% secure to use for hotel owners and guests. The Hotel Booking Engine is used by hundreds of properties every day. CultBooking has top performing conversion rate and is also made for: developers, marketing and web-agencies, designers, website admins, webmasters and anyone in the hospitality industry. It is the reservations software plugin that you, or your client, have been searching for. Visit https://www.cultbooking.com/en/ for more details. Visit Plugin Documentation for more plugin parameters. Link to apply for a Demo account: https://admin.cultbooking.com/register Hotel booking engine features: Unlimited properties management (unlimited rooms in a hotel, beds in a hostel) One property management (one apartment, villa, room, etc.) Customizable front-end (logo, brand colors, pictures, booking form, etc.) Custom rate plans (Non Refundable, Flexible, Last-minute rates) Various pricing models: Per Occupancy, Per Day, By LOS etc.. Multi-language Smart calendar (showing prices, MinLOS, available days and much more) Extra services (guests can optionally add cleaning, parking or other extra service) Min and max stay periods Discount coupons and promo codes Children per room test2 Payment gateway, accept automatic payments to your bank account via PayPal, Visa, MasterCard, American Express, Klarna and much more. Channel Manager connections. CultBooking is a certified Channel Manager provider Link to open an account: https://admin.cultbooking.com/register
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C