cleantalk
Vulnerabilities and Security Researches

WP Hotel Booking, CVE-2025-8942

CVE, Research URL

CVE-2025-8942

Home page URL

Security reports for WP Hotel Booking

Application

WP Hotel Booking

Published on
Sep 18, 2025
Research Description
The WP Hotel Booking WordPress plugin before 2.2.3 lacks proper server-side validation for review ratings, allowing an attacker to manipulate the rating value (e.g., sending negative or out-of-range values) by intercepting and modifying requests.
Affected versions
max 2.2.3.
Status
vulnerable
Previous vulnerability researches
Elementor Header & Footer Builder (CVE-2025-9703) , Apr 26, 2026
Elementor Header & Footer Builder (CVE-2024-11230) , Dec 24, 2024
Elementor Header & Footer Builder (CVE-2024-10325) , Nov 09, 2024
Elementor Header & Footer Builder (CVE-2024-10050) , Oct 25, 2024
Elementor Header & Footer Builder (CVE-2025-60448) , Dec 10, 2025
New vulnerability
Contact Form 7 reCAPTCHA (CVE-2025-8280) , Apr 27, 2026
Backup Migration (CVE-2026-39480) , Apr 27, 2026
WP-BusinessDirectory – Business directory plugin for WordPress (CVE-2026-39591) , Apr 27, 2026
WP Hotel Booking (CVE-2025-8942) , Apr 27, 2026
Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling (CVE-2026-39432) , Apr 27, 2026