WP Hotel Booking
Moderate fix1 remedy
cpe:2.3:a:thimpress:wp_hotel_booking:*:*:*:*:wordpress:*:*
Moderate fix1 remedy
- <= 2.1.5
WP Hotel Booking Plugin Missing Authorization Vulnerability Allowing Unauthenticated Room Additions
Vulnerability
Patched
A vulnerability exists in the WP Hotel Booking plugin for WordPress, in all versions through 2.1.5. The issue arises from a lack of proper capability checks, which allows unauthorized users to add rooms with custom prices. This vulnerability could be exploited by unauthenticated attackers to manipulate room data.
Impact
Exploitation of this vulnerability could lead to unauthorized modifications of room data, including the addition of rooms with custom prices.
Remediation
Users are advised to update the WP Hotel Booking plugin to version 2.1.6 or a newer patched version.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
3.4impact
0.6exploitability
8.2remediation
7.7relevance
0.0threat
3.2urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.