Skip to content
Noroxi

Hostel

hostel · plugin

Known security vulnerabilities for Hostel. Find out in seconds which version runs on your site with WP Lens.

10 known vulnerabilities

latest Sep 22, 2026

Vulnerabilities

  • CVE-2025-39566

    WordPress Hostel plugin <= 1.1.5.6 - SQL Injection Vulnerability

    High 7.6

  • CVE-2025-66119

    WordPress Hostel plugin <= 1.1.5.9 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2025-30848

    WordPress Hostel plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2025-31102

    WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-3907

    Hostel <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wphostel-book' Shortcode

    Medium 6.4

  • CVE-2026-1838

    Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter

    Medium 6.1

  • CVE-2019-12345

    XSS exists in the Kiboko Hostel plugin before 1.1.4 for WordPress.

    Medium 6.1

  • CVE-2023-32120

    WordPress Hostel plugin <= 1.1.5.1 - Cross Site Scripting (XSS)

    Medium 5.9

  • CVE-2026-1645

    Hostel <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_currency' Parameter and Localization file URL Setting

    Medium 4.4

  • CVE-2024-4314

    hostel <= 1.1.5.3 - Cross-Site Request Forgery

    Medium 4.3

← Back to directory