HB
Product
Hotel Booking
7
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch
Add Hotel Booking to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-118084 New | 6.5 | Oct 29 | WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.8 |
| CVE-2022-29443 | 5.4 | Jun 15 | Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's Hotel Booking plugin <= 3.0 at WordPress Affected: through 3.0 |
| CVE-2025-63001 | 5.3 | Dec 31 | WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability Affected: through 3.8 |
Showing 3
