integrationshotelrunner

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

integrationshotelrunner records in CISA KEV

No integrationshotelrunner vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-37534 CVE-2025-60168 · GHSA-4gg8-fw6h-7j43

WordPress HotelRunner Booking Widget Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in integrationshotelrunner HotelRunner Booking Widget hotelrunner allows Stored XSS.This issue affects HotelRunner Booking Widget: from n/a through <= 1.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00127 Published 2025-10-22 No fix listed CWE-352

TI-2025-12007 CVE-2025-13135 · GHSA-hgjp-cmxx-r459

HotelRunner Booking Widget <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The HotelRunner Booking Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hotelrunner' shortcode in all versions up to, and including, 5.2.4 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00199 Published 2025-11-21 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0