HotelRunner Booking Widget

hotelrunner · plugin

Known security vulnerabilities for HotelRunner Booking Widget. Find out in seconds which version runs on your site with WP Lens.

2 known vulnerabilities

latest Nov 21, 2025

Vulnerabilities

CVE-2025-60168
WordPress HotelRunner Booking Widget Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability
High 7.1
CVE-2025-13135
HotelRunner Booking Widget <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium 6.4