Roomcloud

Roomcloud has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Roomcloud has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nitin Venkatesh. Roomcloud is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Roomcloud vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2015-3904

Roomcloud < 1.3 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2015-05-09 00:00	Roomcloud < 1.3 - Cross-Site Scripting Roomcloud < 1.3	`CVE-2015-3904`	7.2 High	Nitin Venkatesh	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv2.0.32

Roomcloud

Author

Tecnes Milano Srl

5.0(1)

100/100

Last Updated

2026-04-03 (5mo ago)

Active Installs

300+

Downloads

7,815

Requires WP

4.0.1+

Requires PHP

7.0.0+

Tested up to

WP 6.9.7

Created

2014-08-16 (12y ago)

Use Roomcloud plugin to embed our Booking Engine form into your wordpress site. This allows your customers to make online reservations on the web site of your hotel. More info at http://www.roomcloud.net

View on WordPress.org