WP Hotel Booking

Explore WP Hotel Booking vulnerabilities across all versions. Currently tracking 25 known vulnerabilities, including severity, impact, and patch status.

01234567891028.02.2016Today16.09.20204.3WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass CVSS 4.3 · 16.09.202008.12.20209.8WP Hotel Booking <= 1.10.3 - Remote Code Execution CVSS 9.8 · 08.12.202002.08.20228.8WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery CVSS 8.8 · 02.08.202222.08.20227.5WP Hotel Booking <= 2.0.0 - Missing Authorization to Settings Update CVSS 7.5 · 22.08.202220.10.20236.5WP Hotel Booking <= 2.0.7 - Missing Authorization to (Subscriber+) Arbitrary Post Deletion CVSS 6.5 · 20.10.202326.10.20234.3WP Hotel Booking <= 2.0.8 - Insufficient Authorization to Unauthorized Post Deletion CVSS 4.3 · 26.10.20239.8WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection CVSS 9.8 · 26.10.202303.02.20246.5WP Hotel Booking <= 2.0.9.2 - Improper Authorization on Multiple REST API Routes CVSS 6.5 · 03.02.202428.03.20245.3WP Hotel Booking <= 2.0.9.2 - Missing Authorization CVSS 5.3 · 28.03.202419.06.202410.0WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection CVSS 10.0 · 19.06.202401.10.20248.8WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload CVSS 8.8 · 01.10.202431.10.20248.8WP Hotel Booking <= 2.2.9 - Authenticated (Contributor+) Local File Inclusion CVSS 8.8 · 31.10.202416.01.20255.3WP Hotel Booking <= 2.1.5 - Missing Authorization CVSS 5.3 · 16.01.202521.01.20254.3WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval CVSS 4.3 · 21.01.202507.05.20254.3WP Hotel Booking <= 2.1.9 - Cross-Site Request Forgery CVSS 4.3 · 07.05.202528.08.20254.3WP Hotel Booking <= 2.2.1 - Improper Input Validation to Authenticated (Subscriber+) Rating Manipulation CVSS 4.3 · 28.08.202505.11.20254.4Hotel Booking <= 2.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting CVSS 4.4 · 05.11.20255.3Hotel Booking <= 2.2.7 - Unauthenticated Information Exposure CVSS 5.3 · 05.11.20254.3Hotel Booking <= 2.2.8 - Cross-Site Request Forgery CVSS 4.3 · 05.11.202516.01.20265.3WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter CVSS 5.3 · 16.01.202619.06.20264.3WP Hotel Booking < 2.3.1 - Missing Authorization CVSS 4.3 · 19.06.202609.07.20266.1WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' Parameters CVSS 6.1 · 09.07.202610.07.20265.3WP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN Handler CVSS 5.3 · 10.07.202616.07.20266.1WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter CVSS 6.1 · 16.07.202623.07.20266.4WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute CVSS 6.4 · 23.07.2026

Strategic Overview

Avg CVSSMedium
6.2/ 10
Patch Coverage100%
Open

0

Fixed

25

Get automatic notifications for all WP Hotel Booking vulnerabilities before they are exploited.

Vulnerability Records

25 records
2026-07-23 18:03CVE-2026-15464
6.4
Medium
Wordfence PRISMYes
2026-07-16 17:01CVE-2026-15094
6.1
Medium
Wordfence PRISMYes
2026-07-10 16:57CVE-2026-11901
5.3
Medium
valent1Yes
2026-07-09 14:45CVE-2026-11392
6.1
Medium
1M4Yes
2026-06-19 00:00CVE-2026-9822
4.3
Medium
Sanjorn KeeratirungsanYes
2026-01-16 14:00CVE-2025-14075
5.3
Medium
Itthidej Aramsri (Boeing777)Yes
2025-11-05 00:00CVE-2025-63011
4.4
Medium
darooYes
2025-11-05 00:00CVE-2025-63013
5.3
Medium
darooYes
2025-11-05 00:00CVE-2025-63012
4.3
Medium
darooYes
2025-08-28 00:00CVE-2025-8942
4.3
Medium
Muhammed ÇelikYes
Showing 1–10 of 25 reports
WP Hotel Booking banner
Latestv2.3.4

WP Hotel Booking

ThimPress

Author

ThimPress

3.7(67)
74/100
Last Updated
2026-07-20 (10d ago)
Active Installs
7,000+
Downloads
449,992
Requires WP
6.4+
Requires PHP
7.4+
Tested up to
WP 7.0.2
Created
2016-02-28 (11y ago)

WP Hotel Booking is a comprehensive solution for hotel owners, lodges, or any accommodation providers who need a professional booking system directly on their WordPress website. With an intuitive and user-friendly interface, this plugin helps you efficiently manage every aspect of bookings. How to get help from us Demo Documentation Get Support Discover the best WordPress themes designed specifically for hotel booking and reservations. Our themes are built to work seamlessly with the powerful WP Hotel Booking plugin, making it easy for hotel owners to manage bookings effortlessly. Developers are also welcome to create new WordPress hotel themes using this robust plugin. Explore our premium hotel WordPress themes that use the WP Hotel Booking plugin: Sailing – Hotel WordPress Theme LuxStay – Hotel & BnB WordPress Theme WP Hotel Booking is ideal for: Independent hotel owners looking for a seamless online booking solution. Resort and lodge managers who need an all-in-one reservation system. Hostel and B&B operators want to streamline their booking process. Large hotel chains require a scalable and professional booking management system. Developers building hotel-related WordPress themes with robust booking features. WP Hotel Booking Features Complete Hotel Booking System Room Management Bookings Management Customer Management Coupon Management Pricing Plans Management Extra Packages Management Block Special Date Management Reports + Multilingual Ready Multi Currencies 4 Payment Gateways (Offline Payment, Authorize.net, Paypal, Stripe) WP Hotel Booking not only saves you time but also provides a smooth booking experience for your customers. This plugin is suitable for businesses of all sizes, from small hotels to large hotel chains. Free add-ons for WP Hotel Booking are available in WordPress: Authorize.Net Payment method for WP Hotel Booking – Authorize.Net payment method for WP Hotel Booking Plugin. Stripe Payment method for WP Hotel Booking – Stripe payment method for WP Hotel Booking Plugin. Statistic for WP Hotel Booking – Statistic booking for WP Hotel Booking Plugin. Woocommerce payment method for WP Hotel Booking – Support paying for booking of WP Hotel Booking plugin with the payment system provided by WooCommerce.. WPML for WP Hotel Booking – Multilnguage CMS support for WP Hotel Booking Plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C