agentprime: thimpress-wp-hotel-bookingEvery new CVE for thimpress-wp-hotel-booking.https://agentprime.io/CVE-2026-15464: WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-15464/https://agentprime.io/advisories/CVE-2026-15464/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 06:52:01 GMTCVECVE-2026-15094: WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameterhttps://agentprime.io/advisories/CVE-2026-15094/https://agentprime.io/advisories/CVE-2026-15094/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 05:35:59 GMTCVECVE-2026-11901: WP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN Handlerhttps://agentprime.io/advisories/CVE-2026-11901/https://agentprime.io/advisories/CVE-2026-11901/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 05:35:44 GMTCVECVE-2026-11392: WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' Parametershttps://agentprime.io/advisories/CVE-2026-11392/https://agentprime.io/advisories/CVE-2026-11392/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 03:31:13 GMTCVECVE-2025-14075: WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameterhttps://agentprime.io/advisories/CVE-2025-14075/https://agentprime.io/advisories/CVE-2025-14075/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Jan 2026 02:22:30 GMTCVECVE-2025-63013: WordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerabilityhttps://agentprime.io/advisories/CVE-2025-63013/https://agentprime.io/advisories/CVE-2025-63013/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 14:52:27 GMTCVECVE-2025-63012: WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Request Forgery (CSRF) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-63012/https://agentprime.io/advisories/CVE-2025-63012/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 14:52:27 GMTCVECVE-2025-63011: WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-63011/https://agentprime.io/advisories/CVE-2025-63011/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 14:52:27 GMTCVECVE-2025-47448: WordPress WP Hotel Booking plugin <= 2.1.9 - Cross Site Request Forgery (CSRF) Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-47448/https://agentprime.io/advisories/CVE-2025-47448/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 May 2025 14:19:34 GMTCVECVE-2024-13447: WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrievalhttps://agentprime.io/advisories/CVE-2024-13447/https://agentprime.io/advisories/CVE-2024-13447/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jan 2025 11:07:58 GMTCVECVE-2024-12370: WP Hotel Booking <= 2.1.5 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2024-12370/https://agentprime.io/advisories/CVE-2024-12370/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jan 2025 08:25:38 GMTCVECVE-2024-51582: WordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2024-51582/https://agentprime.io/advisories/CVE-2024-51582/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Nov 2024 13:38:39 GMTCVECVE-2024-7855: WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2024-7855/https://agentprime.io/advisories/CVE-2024-7855/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.18 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Oct 2024 04:31:17 GMTCVEcriticalCVE-2024-3605: WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-3605/https://agentprime.io/advisories/CVE-2024-3605/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Jun 2024 02:08:22 GMTCVEcriticalCVE-2024-30508: WordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2024-30508/https://agentprime.io/advisories/CVE-2024-30508/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:17:20 GMTCVECVE-2020-36757: WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypasshttps://agentprime.io/advisories/CVE-2020-36757/https://agentprime.io/advisories/CVE-2020-36757/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jul 2023 06:52:35 GMTCVECVE-2021-36852: WordPress WP Hotel Booking plugin <= 1.10.5 - Cross-Site Request Forgery (CSRF) vulnerabilityhttps://agentprime.io/advisories/CVE-2021-36852/https://agentprime.io/advisories/CVE-2021-36852/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Aug 2022 14:45:47 GMTCVE