Hotel Booking vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

HB

Product

Hotel Booking

by nicdark · last CVE Oct 6, 2026

6

CVEs

0

On KEV

8.1

Max CVSS

1

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 4Medium 2Low 0

Severity

All severities6 Critical0 High4 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Hotel Booking to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-39526	8.1	1%	Apr 17	WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability Affected: through 3.6
CVE-2025-53259	7.5	1%	Jun 27	WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability Affected: through 3.7
CVE-2025-47498	7.5	1%	May 7	WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability Affected: through 3.6
CVE-2026-39784	7.1	0%	Oct 6	WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability Affected: through 3.8
CVE-2022-29443	5.4	1%	Jun 15	Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Nicdark's Hotel Booking plugin <= 3.0 at WordPress Affected: through 3.0
CVE-2025-63001	5.3	0%	Dec 31	WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability Affected: through 3.8