Nuss - Hotel Booking WordPress

Nuss - Hotel Booking WordPress has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; none of them are fixed as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 3 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 2 of the records (50%). Other recurring categories include Deserialization Of Untrusted Data, Missing Authorization.

None of the 4 issues recorded for Nuss - Hotel Booking WordPress have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, most of them (2) reported by Frank.

Strategic Overview

Avg CVSSHigh

7.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Nuss - Hotel Booking WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 8.1

Nuss <= 1.3.3 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

4 records


2026-07-02 00:00	Nuss - Hotel Booking WordPress <= 1.3.6 - Authenticated (Contributor+) Local File Inclusion Nuss - Hotel Booking WordPress <= 1.3.6	`CVE-2026-57799`	7.5 High	João Pedro S Alcântara (Kinorth)	No
2025-08-25 00:00	Nuss <= 1.3.3 - Unauthenticated Local File Inclusion Nuss - Hotel Booking WordPress <= 1.3.3	`N/A`	8.1 High	Bonds	No
2025-07-08 00:00	Nuss <= 1.3.3 - Missing Authorization Nuss - Hotel Booking WordPress <= 1.3.3	`CVE-2025-52804`	5.3 Medium	Frank	No
2025-06-23 00:00	Nuss <= 1.3.3 - Authenticated (Subscriber+) PHP Object Injection Nuss - Hotel Booking WordPress <= 1.3.3	`CVE-2025-52827`	7.5 High	Frank	No

Showing 1–4 of 4 reports