WP Hotel Booking

Vulnerabilities 27Slug wp-hotel-bookingLatest version 2.3.0WordPress.org →

Minimum safe version

2.3.0

Update to 2.3.0 or later to address 27 fixable vulnerabilities

Latest available2.3.0 ✓
Critical 9.1
2025-09-18< 2.2.3

WP Hotel Booking <= 2.2.1 - Improper Input Validation to Authenticated (Subscriber+) Rating Manipulation

EUVDWordfenceCVE
N/A
< 2.0.9.3

WP Hotel Booking &lt; 2.0.9.3 - Improper Authorization on Multiple REST API Routes

WPScan
N/A
2024-02-03< 2.0.9.3

WP Hotel Booking <= 2.0.9.2 - Improper Authorization on Multiple REST API Routes

Wordfence
Medium 5.4
2023-11-20< 2.0.8

CVE-2023-5651

CVEWPScan
N/A
2023-10-20< 2.0.8

WP Hotel Booking <= 2.0.7 - Missing Authorization to (Subscriber+) Arbitrary Post Deletion

Wordfence
N/A
< 2.0.1

WP Hotel Booking &lt;= 1.10.5 - Unauthenticated Arbitrary Settings Update

WPScan
N/A
2023-06-07< 1.10.2

CVE-2021-4342

CVE
N/A
< 1.10.2

Various Affected Software (Various Versions) - Cross-Site Request Forgery Bypass

Wordfence
N/A
2022-08-22< 2.0.1

WP Hotel Booking <= 2.0.0 - Missing Authorization to Settings Update

Wordfence
N/A
2022-08-23< 2.0.1

WordPress WP Hotel Booking plugin <= 1.10.5 - Unauthenticated Arbitrary Settings Update vulnerability

Patchstack
N/A
2020-09-16< 1.10.2

WordPress WP Hotel Booking plugin <= 1.10.1 - Cross-Site Request Forgery (CSRF) vulnerability

Patchstack