What’s Vulnerable › Products

Themefic Hydra Booking vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Themefic Hydra Booking version is affected

Latest Themefic Hydra Booking vulnerabilities

• CVE-2026-28188 — WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability (CVSS 7.3)
• CVE-2026-57388 — WordPress Hydra Booking plugin <= 1.1.44 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-42675 — WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability (CVSS 7.3)
• CVE-2026-39541 — WordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2025-68027 — WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability (CVSS 7.3)
• CVE-2025-68055 — WordPress Hydra Booking plugin <= 1.1.32 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2025-49378 — WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2025-49377 — WordPress Hydra Booking plugin <= 1.1.9 - Broken Access Control vulnerability (CVSS 6.3)
• CVE-2025-49323 — WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection Vulnerability (CVSS 8.5)