Hotel Booking vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

HB

Product

Hotel Booking

by nicdark · last CVE Oct 29, 2026

7

CVEs

0

On KEV

8.1

Max CVSS

2

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 4Medium 3Low 0

Severity

All severities7 Critical0 High4 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Hotel Booking to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-39526	8.1	1%	Apr 17	WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability Affected: through 3.6
CVE-2025-53259	7.5	1%	Jun 27	WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability Affected: through 3.7
CVE-2025-47498	7.5	1%	May 7	WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability Affected: through 3.6
CVE-2026-39784	7.1	0%	Oct 6	WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability Affected: through 3.8
CVE-2026-118084 New	6.5	–	Oct 29	WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.8
CVE-2022-29443	5.4	1%	Jun 15	Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's Hotel Booking plugin <= 3.0 at WordPress Affected: through 3.0
CVE-2025-63001	5.3	0%	Dec 31	WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability Affected: through 3.8