Skip to content
Noroxi

Hotel Booking

nd-booking · plugin

Known security vulnerabilities for Hotel Booking. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

1 with public exploit code · latest Dec 31, 2025

Vulnerabilities

  • CVE-2025-39526

    WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability

    High 8.1

  • CVE-2025-53259

    WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability

    High 7.5

  • CVE-2025-47498

    WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability

    High 7.5

  • CVE-2019-15774

    The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

    Medium 6.1

  • CVE-2022-29443

    WordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Medium 5.4

  • CVE-2025-63001

    WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability

    Medium 5.3

← Back to directory