Skip to content
OpenAdvisories

Product · themefic

Hydra Booking

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.3
    CVE-2026-28188

    WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.

    themefic Hydra Booking
  • High 7.1
    CVE-2026-57388

    WordPress Hydra Booking plugin <= 1.1.44 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through <= 1.1.44.

    themefic Hydra Booking
  • High 7.3
    CVE-2026-42675

    WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41.

    themefic Hydra Booking
  • High 7.3
    CVE-2025-68027

    WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through <= 1.1.32.

    themefic Hydra Booking
  • High 8.5
    CVE-2025-68055 Public exploit

    WordPress Hydra Booking plugin <= 1.1.32 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through <= 1.1.32.

    themefic Hydra Booking
  • High 8.5
    CVE-2025-49378

    WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through <= 1.1.10.

    themefic Hydra Booking
  • High 8.5
    CVE-2025-49323

    WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through <= 1.1.10.

    themefic Hydra Booking