Hotel Galaxy

Hotel Galaxy has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Hotel Galaxy has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

All of these findings were reported by stealthcopter. Hotel Galaxy is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Hotel Galaxy vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-43991

Hotel Galaxy <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-08-29 00:00	Hotel Galaxy <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting Hotel Galaxy <= 4.4.24	`CVE-2024-43991`	6.4 Medium	stealthcopter	No

Showing 1–1 of 1 reports

Latestv4.4.46

Hotel Galaxy

Author

BurgerThemes

4.8(67)

96/100

Last Updated

2026-08-04 (1mo ago)

Active Installs

700+

Downloads

266,667

Requires WP

5.0+

Requires PHP

7.2+

Created

2017-02-14 (10y ago)

Hotel Galaxy is a Modern Hotel & Room Booking WordPress theme that is perfectly suitable for the hotel, resort, villas, and all kinds of hotel industry websites. This eye-catching theme is looking gorgeous for its clean and smooth design. It is compatible with the Advanced Booking Calendar plugin. The built-in booking system comes with some extended options. For example, if someone wants to book a room, they can do it either by searching a particular room from the search bar. Hotel Galaxy comes with the necessary features for your online presence. Checkout Pro Version https://burgerthemes.com/demo/pro/hotelgalaxy