What’s Vulnerable › Products

Hotel Booking vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Hotel Booking version is affected

Latest Hotel Booking vulnerabilities

• CVE-2026-84167 — Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR (CVSS 4.3)
• CVE-2026-84166 — Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRF (CVSS 4.3)