WP Hotel Booking
Security Risk Profile
29
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 2, 2024 to present
5
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
29/100
low
Severity Distribution
Critical
1High
1Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Malicious File Upload
1
Most Affected Products
1. WP Hotel Booking WP Hotel Booking4
2. thimpress Wp Hotel Booking Wordpress3
3. WP Hotel Booking WP Hotel Booking plugin for WordPress1
Recent Vulnerabilities
See more →CVE-2026-11901
CVSS 5.3medium
WP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN Handler
7/11/2026🔧 No Patch
CVE-2025-8942
CVSS 9.1EPSS 0%critical
WP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation
9/18/2025🔧 No Patch
CVE-2024-13447
CVSS 4.3medium
WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval
1/22/2025
CVE-2024-12370
CVSS 5.3medium
WP Hotel Booking <= 2.1.5 - Missing Authorization
1/17/2025
CVE-2024-7855
CVSS 8.8EPSS 0%high
WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload
10/2/2024
Monitor WP Hotel Booking in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.