HO
Product
Hostel
4
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Hostel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3907 | 6.4 | Jul 10 | Hostel <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wphostel-book' Shortcode Affected: through 1.1.7 |
| CVE-2026-1838 | 6.1 | Apr 18 | Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter Affected: through 1.1.6 |
| CVE-2026-1645 | 4.4 | Sep 22 | Hostel <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_currency' Parameter and Localization file URL Setting Affected: through 1.1.8 |
| CVE-2024-4314 | 4.3 | May 9 | hostel <= 1.1.5.3 - Cross-Site Request Forgery Affected: through 1.1.5.3 |
Showing 4