Known vulnerabilities in Unknown Hotel Booking
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-84166 | The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order… | 4.3 Medium | Oct 12, 2026 |
| CVE-2026-84167 | The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting… | 4.3 Medium | Oct 12, 2026 |