Advisories · Technology
WP Hotel Booking.
Every CVE that names WP Hotel Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation
- WP Hotel Booking
- CWE-20
- CWE-472
- CVSS 5.3 Medium
WP Hotel Booking < 2.3.2 - Unauthenticated PayPal Payment Bypass
- WP Hotel Booking
- CWE-345
- CVSS 6.8 Medium
WP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List Search
- WP Hotel Booking
- SQL injection
- CVSS 6.5 Medium
WP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX Handlers
- WP Hotel Booking
- CVSS 9.1 CriticalCritical · CVSS 9+
WP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation
- WP Hotel Booking
- CVSS 5.4 Medium
WP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post Deletion
- WP Hotel Booking
-
WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion
- WP Hotel Booking
-
WP Hotel Booking < 2.0.8 - Unauthenticated SQLi
- WP Hotel Booking