Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-63013 EUVD-2025-201996GHSA-3qhf-g8c6-mhph

WordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

Published Dec 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Retrieve Embedded Sensitive Data.This issue affects WP Hotel Booking: from n/a through <= 2.2.7.

Affected products

VendorProductAffectedFixed
ThimPress WP Hotel Booking ≤ 2.2.7 —

References