Known Vulnerabilities for WP Hotel Booking by Thimpress
Listed below are 10 of the newest known vulnerabilities associated with "WP Hotel Booking" by "Thimpress".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57723 json | Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows Path Traversal. Thi... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-57347 json | Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions. | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-42762 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hot... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-42737 json | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in e4jvikwp VikBooking Hotel Boo... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-42683 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hot... | Not Provided | 2026-06-01 | 2026-06-01 |
| CVE-2026-39539 json | Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions. | Not Provided | 2026-06-17 | 2026-06-17 |
| CVE-2026-12937 json | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to ... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-12754 json | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'layou... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-11901 json | The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up ... | Not Provided | 2026-07-11 | 2026-07-11 |
| CVE-2026-11392 json | The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' and 'check_... | Not Provided | 2026-07-10 | 2026-07-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Thimpress | Wp Hotel Booking | 1.9.9 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.8.7 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.8.6 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.8.5 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.8.4 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.8.3 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.8.2 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.8.1 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.8 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.9 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.8 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.7 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.6 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.5 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.4 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.3 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.2 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7.1 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.7 | |||
| Application | Thimpress | Wp Hotel Booking | 1.9.6.2 |