Critical · 9.9 CVE-2026-125851 EUVD-2026-125414GHSA-x6g9-3pp8-wfxp

WordPress Hotel Booking Lite theme <= 2.5.1 - Arbitrary File Upload vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Vendor: themagnifico52 Product: Hotel Booking Lite

Description

Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Hotel Booking Lite hotel-booking-lite allows Upload a Web Shell to a Web Server.This issue affects Hotel Booking Lite: from n/a through 2.5.1.

Affected products

Vendor	Product	Affected	Fixed
themagnifico52	Hotel Booking Lite	≤ 2.5.1	—

References

https://patchstack.com/database/wordpress/theme/hotel-booking-lite/vulnerability/wordpress-hotel-booking-lite-theme-2-5-1-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry