What’s Vulnerable › Products

nicdark Hotel Booking vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your nicdark Hotel Booking version is affected

Latest nicdark Hotel Booking vulnerabilities

• CVE-2026-118084 — WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
• CVE-2026-39784 — WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-63001 — WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-53259 — WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability (CVSS 7.5)
• CVE-2025-47498 — WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability (CVSS 7.5)
• CVE-2025-39526 — WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability (CVSS 8.1)
• CVE-2022-29443 — WordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 5.4)