Plugin icon

MotoPress Hotel Booking

motopress-hotel-booking-lite

Vulnerabilities:

4

Last Updated:

April 27, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-11-25
Title
Hotel Booking Lite < 5.2.4 - Authenticated (Hotel Worker+) Remote Code Execution
Fixed in
Fixed in 5.2.4
CVSS
5.3 (medium)
Published
2024-05-10
Title
Hotel Booking Lite < 4.11.2 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 4.11.2
CVSS
9.8 (critical)
Published
2023-12-01
Title
Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion
Fixed in
Fixed in 4.8.5
CVSS
9.8 (critical)
Published
2023-03-16
Title
Hotel Booking Lite < 4.7.0 - Settings Update via CSRF
Fixed in
Fixed in 4.7.0
CVSS
4.3 (medium)