Twice Commerce – Easy Rental Booking System
Twice Commerce – Easy Rental Booking System has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Twice Commerce – Easy Rental Booking System has a vendor fix available, so running the current release closes it.
All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). Twice Commerce – Easy Rental Booking System is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-31543Twice Commerce <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Twice Commerce – Easy Rental Booking System
Author
Twice Commerce
Twice Commerce is the easiest way to handle rental and activity bookings on your WordPress website. Our software is used by thousands of merchants, from local mom-and-pop shops to global retail chains. Install the Twice Commerce WordPress plugin and make your products rentable on your website in a few clicks. Twice Commerce offers a free 3-day trial. For those continuing their journey, TWICE offers the first subsequent month for 1 USD only. Regular pricing plans start at 29 USD / month. Features Online Store Product Pages Product Categories and Collections Location Selector Discount Codes Customizable Checkout Form Payment Processing with Multiple Payment Methods Product Catalog Rent Products Sell Products Sell Services Product Packages Product Variants Recommended Products & Cross-selling Channel-specific Pricing Channel-specific Visibility & Availability Category-specific Terms & Conditions Inventory Management Inventory Tracking Real-time Availability Inventories in Multiple Locations Stock Transfers Data Specifications Usage History Order Management Walk-in Rentals Local Pick-up Local Deliveries Order Management Order Editing Order Dashboard Flexible Buffer Time Settings Pre-authorized Security Deposits Admin & Operation User Access Levels Multi-language Support Barcode Scanner Support Tax rates Localization Settings Customer List Sales & Accounting Reports Data Imports & Exports Webhooks Support Chat Support Knowledge Base Customer stories Decathlon UK — Sports Equipment Rentals Read more Motonet — Trailer and Tool Rentals Read more Bike Garage — Bike Rentals Read more Sisu Outdoor — Sports Equipment Rentals & Tours Read more See websites built with Twice Commerce Get in touch We are always open to ideas. Drop us a message on our website or via email. More technical documentation about the plugin can be found on GitHub: https://github.com/rentle/embed-rentle
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C