Login Request a demo
WH
Product
WP Hotel Booking
by · last CVE Aug 6, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 0Medium 6Low 0
Severity
All severities8Critical2High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Hotel Booking to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5652
9.8
64%
Nov 20
WP Hotel Booking < 2.0.8 - Unauthenticated SQLi
Affected: before 2.0.8
CVE-2025-8942
9.1
0%
Sep 18
WP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation
Affected: before 2.2.3
CVE-2026-15153
6.8
0%
Jul 30
WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search
Affected: before 2.3.2
CVE-2026-9822
6.5
0%
Jun 19
WP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX Handlers
Affected: before 2.3.1
CVE-2023-5651
5.4
0%
Nov 20
WP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post Deletion
Affected: before 2.0.8
CVE-2023-5799
5.4
1%
Nov 20
WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion
Affected: before 2.0.8
CVE-2026-15149
5.3
0%
Aug 6
WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation
Affected: before 2.3.3
CVE-2026-15152
5.3
0%
Aug 6
WP Hotel Booking < 2.3.2 - Unauthenticated PayPal Payment Bypass
Affected: before 2.3.2
Showing 8