Login Request a demo
WH
Product
WP Hotel Booking
by thimpress · last CVE Jul 24, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 4High 3Medium 13Low 0
Severity
All severities20Critical4High3Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Hotel Booking to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-51582
8.8
1%
Nov 4
Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects WP Hotel Booking: from n/a through <=…
Affected: through 2.1.4
CVE-2024-7855
8.8
18%
Oct 2
The WP Hotel Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_review() function in all versions up to, and…
Affected: before 2.1.3
CVE-2021-36852
8.0
0%
Aug 22
Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress
Affected: through 1.10.5
Showing 3