Skip to contentThimpress Wp Hotel Booking vulnerabilities
- thimpress wp hotel bookingWP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price ManipulationCVE-2026-151495.3 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.3.2 - Unauthenticated PayPal Payment BypassCVE-2026-151525.3 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List SearchCVE-2026-151536.8 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode AttributeCVE-2026-154646.4 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' ParameterCVE-2026-150946.1 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN HandlerCVE-2026-119015.3 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' ParametersCVE-2026-113926.1 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX HandlersCVE-2026-98226.5 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' ParameterCVE-2025-140755.3 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerabilityCVE-2025-630134.3 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-630124.3 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-630115.9 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.2.3 - Subscriber+ Rating ManipulationCVE-2025-89429.1 Critical
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.1.9 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-474484.3 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email RetrievalCVE-2024-134474.3 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.5 - Missing AuthorizationCVE-2024-123705.3 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.9 - Local File Inclusion vulnerabilityCVE-2024-515827.5 High
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-7855EPSS 17.7%8.8 High
- thimpress wp hotel bookingWP Hotel Booking <= 2.1.0 - Unauthenticated SQL InjectionCVE-2024-3605Public exploit10.0 Critical
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.0.9.2 - Broken Access Control vulnerabilityCVE-2024-305086.5 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post DeletionCVE-2023-56515.4 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post DeletionCVE-2023-57995.4 Medium
- thimpress wp hotel bookingWP Hotel Booking < 2.0.8 - Unauthenticated SQLiCVE-2023-5652EPSS 65.2%9.8 Critical
- thimpress wp hotel bookingWP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery BypassCVE-2020-367574.3 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 1.10.5 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2021-368524.3 Medium