Product by Nicdark
Hotel Booking
7 known vulnerabilities in Hotel Booking (Nicdark), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-47498 | WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability | 7.5 | |
| High | CVE-2025-39526 | WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability | 8.1 | |
| High | CVE-2025-53259 | WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability | 7.5 | |
| Medium | CVE-2026-118084 | WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability | 6.5 | |
| High | CVE-2026-39784 | WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Medium | CVE-2025-63001 | WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability | 5.3 | |
| Medium | CVE-2022-29443 | Nicdark Hotel Booking (WordPress plugin): Cross-site Scripting | 4.1 |