HB
Product
Hotel Booking
by nicdark · last CVE Oct 29, 2026
7
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch

Add Hotel Booking to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-118084
New
6.5–Oct 29
WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 3.8
CVE-2022-29443
5.4
1%
Jun 15
Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's Hotel Booking plugin <= 3.0 at WordPress
Affected: through 3.0
CVE-2025-63001
5.3
0%
Dec 31
WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability
Affected: through 3.8
Showing 3