Prasunsen Hostel vulnerabilities

• prasunsen hostel Hostel <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_currency' Parameter and Localization file URL Setting CVE-2026-1645 4.4 MediumSeptember 22, 2026
• prasunsen hostel Hostel <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wphostel-book' Shortcode CVE-2026-3907 6.4 MediumJuly 10, 2026
• prasunsen hostel Hostel <= 1.1.6 - Reflected Cross-Site Scripting via 'shortcode_id' Parameter CVE-2026-1838 6.1 MediumApril 18, 2026
• bob hostel WordPress Hostel plugin <= 1.1.5.1 - Cross Site Scripting (XSS) CVE-2023-32120 5.9 MediumDecember 24, 2025
• bob hostel WordPress Hostel plugin <= 1.1.5.9 - Cross Site Scripting (XSS) vulnerability CVE-2025-66119 7.1 HighDecember 18, 2025
• kibokolabs hostel Hostel < 1.1.5.9 - Admin+ Stored XSS CVE-2025-6236 4.8 MediumJuly 10, 2025
• kibokolabs hostel Hostel < 1.1.5.8 - Reflected XSS CVE-2025-6234 6.1 MediumJuly 10, 2025
• bob hostel WordPress Hostel plugin <= 1.1.5.6 - SQL Injection Vulnerability CVE-2025-39566 7.6 HighApril 16, 2025
• bob hostel WordPress Hostel plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-30848 7.1 HighApril 1, 2025
• bob hostel WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-31102 7.1 HighMarch 28, 2025
• kibokolabs hostel Hostel < 1.1.5.3 - Reflected XSS CVE-2024-3753 5.9 MediumJuly 13, 2024
• prasunsen hostel hostel <= 1.1.5.3 - Cross-Site Request Forgery CVE-2024-4314 4.3 MediumMay 9, 2024
• kibokolabs hostel Hostel < 1.1.5.2 - Admin+ Stored XSS CVE-2023-0545 4.8 MediumJune 5, 2023