Login Request a demo
WH
Product
WP Hotel Booking
by thimpress · last CVE Jul 24, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 4High 3Medium 13Low 0
Severity
All severities20Critical4High3Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Hotel Booking to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3605
9.8
4%
Jun 20
The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/rooms/search-rooms REST API endpoint in all versions up to,…
Affected: through 2.1.0
CVE-2024-30508
9.8
1%
Mar 29
Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP Hotel Booking: from n/a through 2.0.9.2
Affected: before 2.0.9.3
CVE-2023-5652
9.8
64%
Nov 20
The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a…
Affected: before 2.0.8
CVE-2020-29047
9.8
16%
Mar 3
The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1…
Affected: through 1.10.2
Showing 4