Does WP Hotel Booking have any unpatched vulnerabilities?

Yes — WP Hotel Booking currently has 1 unpatched vulnerability. We recommend switching to an alternative or applying any available workarounds.

Is WP Hotel Booking compatible with WordPress 6.9.4?

According to WordPress.org data, WP Hotel Booking 2.3.0 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is WP Hotel Booking compatible with PHP 7.4+?

WP Hotel Booking requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is WP Hotel Booking updated?

WP Hotel Booking was last updated on Mar 11, 2026. Frequent updates are generally a positive security signal.

What is WP Hotel Booking's security score?

WP Hotel Booking has a WP-Safety security score of 40/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

WP Hotel Booking Security & Risk Analysis

wordpress.org/plugins/wp-hotel-booking

WordPress Hotel Booking Plugin - A complete hotel booking reservation plugin for WordPress.

8K active installs v2.3.0 PHP 7.4+ WP 6.0+ Updated Mar 11, 2026

accommodationbooking-systemhotel-bookingreservationroom-management

D · High Risk

CVEs total20

Unpatched1

Last CVEJan 16, 2026

Plugin page Download

Safety Verdict

Is WP Hotel Booking Safe to Use in 2026?

High Risk

Score 40/100

WP Hotel Booking carries significant security risk with 20 known CVEs, 1 still unpatched. Consider switching to a maintained alternative.

20 known CVEs 1 unpatched Last CVE: Jan 16, 2026Updated 23d ago

Risk Assessment

The wp-hotel-booking plugin v2.3.0 presents a mixed security posture. While it demonstrates good practices in several areas, such as a high percentage of SQL queries using prepared statements and a strong presence of nonces and capability checks, significant concerns remain. The static analysis reveals a potential risk due to the presence of the `unserialize` function, which can be a gateway for unserialize vulnerabilities if not handled with extreme caution and input validation. Furthermore, the taint analysis flagged one high-severity flow with unsanitized paths, indicating a potential weakness where user input could be manipulated to affect application logic or data.

Key Concerns

Unpatched CVE
High severity taint flow
Dangerous function: unserialize
Significant historical CVEs
Several critical and high severity CVEs historically

Vulnerabilities

WP Hotel Booking Security Vulnerabilities

CVEs by Year

2 CVEs in 2020

2020

2 CVEs in 2022

2022

3 CVEs in 2023

2023

5 CVEs in 2024 · unpatched

2024

7 CVEs in 2025

2025

1 CVE in 2026

2026

Patched Has unpatched

Severity Breakdown

Critical

High

Medium

20 total CVEs

CVE-2025-14075medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter

Jan 16, 2026 Patched in 2.2.8 (1d)

CVE-2025-63012medium · 4.3Cross-Site Request Forgery (CSRF)

Hotel Booking <= 2.2.8 - Cross-Site Request Forgery

Nov 5, 2025 Patched in 2.2.9 (114d)

CVE-2025-63013medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Hotel Booking <= 2.2.7 - Unauthenticated Information Exposure

Nov 5, 2025 Patched in 2.2.8 (84d)

CVE-2025-63011medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Hotel Booking <= 2.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting

Nov 5, 2025 Patched in 2.2.9 (114d)

CVE-2025-8942medium · 4.3Missing Authorization

WP Hotel Booking <= 2.2.1 - Improper Input Validation to Authenticated (Subscriber+) Rating Manipulation

Aug 28, 2025 Patched in 2.2.3 (29d)

CVE-2025-47448medium · 4.3Cross-Site Request Forgery (CSRF)

WP Hotel Booking <= 2.1.9 - Cross-Site Request Forgery

May 7, 2025 Patched in 2.2.0 (7d)

CVE-2024-13447medium · 4.3Missing Authorization

WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval

Jan 21, 2025 Patched in 2.1.7 (1d)

CVE-2024-12370medium · 5.3Improper Access Control

WP Hotel Booking <= 2.1.5 - Missing Authorization

Jan 16, 2025 Patched in 2.1.6 (1d)

CVE-2024-51582high · 8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

WP Hotel Booking <= 2.2.2 - Authenticated (Contributor+) Local File Inclusion

Oct 31, 2024Unpatched

CVE-2024-7855high · 8.8Unrestricted Upload of File with Dangerous Type

WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload

Oct 1, 2024 Patched in 2.1.3 (1d)

CVE-2024-3605critical · 10Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

Jun 19, 2024 Patched in 2.1.1 (22d)

CVE-2024-30508medium · 5.3Missing Authorization

WP Hotel Booking <= 2.0.9.2 - Missing Authorization

Mar 28, 2024 Patched in 2.0.9.3 (7d)

WF-86f15e94-6ca7-4eb2-8a38-b4add9251dab-wp-hotel-bookingmedium · 6.5Improper Authorization

WP Hotel Booking <= 2.0.9.2 - Improper Authorization on Multiple REST API Routes

Feb 3, 2024 Patched in 2.0.9.3 (4d)

CVE-2023-5799medium · 4.3Incorrect Authorization

WP Hotel Booking <= 2.0.8 - Insufficient Authorization to Unauthorized Post Deletion

Oct 26, 2023 Patched in 2.0.9 (89d)

CVE-2023-5652critical · 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection

Oct 26, 2023 Patched in 2.0.8 (89d)

CVE-2023-5651medium · 6.5Missing Authorization

WP Hotel Booking <= 2.0.7 - Missing Authorization to (Subscriber+) Arbitrary Post Deletion

Oct 20, 2023 Patched in 2.0.8 (371d)

WF-b56a5ff2-10cb-4eee-9409-7f8a22d00358-wp-hotel-bookinghigh · 7.5Missing Authorization

WP Hotel Booking <= 2.0.0 - Missing Authorization to Settings Update

Aug 22, 2022 Patched in 2.0.1 (519d)

CVE-2021-36852high · 8.8Cross-Site Request Forgery (CSRF)

WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery

Aug 2, 2022 Patched in 1.10.6 (539d)

CVE-2020-29047critical · 9.8Deserialization of Untrusted Data

WP Hotel Booking <= 1.10.3 - Remote Code Execution

Dec 8, 2020 Patched in 1.10.4 (1141d)

CVE-2020-36757medium · 4.3Cross-Site Request Forgery (CSRF)

WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass

Sep 16, 2020 Patched in 1.10.2 (1224d)

Code Analysis

Analyzed Mar 16, 2026

WP Hotel Booking Code Analysis

Dangerous Functions

Raw SQL Queries

73 prepared

Unescaped Output

311

1543 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Dangerous Functions Found

unserialize$sub_items = unserialize( $sub_items_data );includes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:604

Bundled Libraries

Select2

SQL Query Safety

89% prepared82 total queries

Output Escaping

83% escaped1854 total outputs

Data Flows

11 unsanitized

Data Flow Analysis

19 flows11 with unsanitized paths

selected_style_list (includes\elementor\widgets\global\filter-room-selected.php:272)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

WP Hotel Booking Attack Surface

Entry Points8

Unprotected0

AJAX Handlers 7

authwp_ajax_tp_hotel_booking_remove_packageincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:58

noprivwp_ajax_tp_hotel_booking_remove_packageincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:59

authwp_ajax_tp_extra_package_removeincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-post-type.php:40

authwp_ajax_check_room_availabelincludes\room\class-wphb-booking-room.php:41

noprivwp_ajax_check_room_availabelincludes\room\class-wphb-booking-room.php:42

authwp_ajax_hotel_booking_single_check_room_availableincludes\room\class-wphb-booking-room.php:46

noprivwp_ajax_hotel_booking_single_check_room_availableincludes\room\class-wphb-booking-room.php:53

REST API Routes 1

GET/wp-json/hb-room/v1/update-reviewincludes\class-wphb-comments.php:83

WordPress Hooks 205

actionrest_api_initincludes\abstracts\class-wphb-abstract-rest-api.php:45

filterrest_pre_serve_requestincludes\abstracts\class-wphb-abstract-rest-controller.php:52

filterwphb/admin/tool-tabsincludes\abstracts\class-wphb-abstract-tool.php:44

actionadmin_menuincludes\admin\class-wphb-admin-menu.php:27

actionadmin_bar_menuincludes\admin\class-wphb-admin-menu.php:28

filterhb_admin_settings_tabsincludes\admin\class-wphb-admin-setting-page.php:31

actioninitincludes\admin\class-wphb-admin.php:36

actionwpbh_meta_box_room_general_fieldsincludes\admin\class-wphb-admin.php:41

actionadmin_noticesincludes\admin\class-wphb-admin.php:42

actionadd_meta_boxesincludes\admin\metaboxes\class-wphb-admin-metabox-booking-actions.php:35

actionsave_postincludes\admin\metaboxes\class-wphb-admin-metabox-booking-actions.php:36

actionadd_meta_boxesincludes\admin\metaboxes\class-wphb-admin-metabox-booking-details.php:35

actionsave_postincludes\admin\metaboxes\class-wphb-admin-metabox-booking-details.php:36

actionadd_meta_boxesincludes\admin\metaboxes\class-wphb-admin-metabox-booking-items.php:35

actionsave_postincludes\admin\metaboxes\class-wphb-admin-metabox-booking-items.php:36

actionadmin_menuincludes\admin\setup\class-wphb-setup-wizard.php:22

actionadmin_initincludes\admin\setup\class-wphb-setup-wizard.php:23

actionadmin_enqueue_scriptsincludes\admin\setup\class-wphb-setup-wizard.php:24

actionadmin_noticesincludes\admin\setup\class-wphb-setup-wizard.php:25

actionadmin_initincludes\admin\wphb-admin-functions.php:22

actionhb_booking_status_changedincludes\admin\wphb-admin-functions.php:257

actionadmin_initincludes\admin\wphb-admin-functions.php:281

filtermanage_hb_booking_posts_columnsincludes\admin\wphb-admin-functions.php:318

actionmanage_hb_booking_posts_custom_columnincludes\admin\wphb-admin-functions.php:396

filterrequestincludes\admin\wphb-admin-functions.php:422

actionrestrict_manage_postsincludes\admin\wphb-admin-functions.php:424

filterthe_titleincludes\admin\wphb-admin-functions.php:480

actionadmin_head-edit.phpincludes\admin\wphb-admin-functions.php:484

actionadmin_print_scriptsincludes\admin\wphb-admin-functions.php:554

filterhb_meta_box_update_meta_valueincludes\admin\wphb-admin-functions.php:578

actionhb_booking_detail_update_meta_boxincludes\admin\wphb-admin-functions.php:615

actionsave_postincludes\admin\wphb-admin-functions.php:634

actionhb_update_meta_box_gallery_settingsincludes\admin\wphb-admin-functions.php:637

actiondo_meta_boxesincludes\admin\wphb-admin-functions.php:663

filterimage_resize_dimensionsincludes\aq_resizer.php:71

actiondelete_postincludes\booking\class-wphb-booking-room-available.php:33

actionsave_postincludes\booking\class-wphb-booking-room-available.php:34

actionhb_booking_status_changedincludes\booking\class-wphb-booking-room-available.php:35

actionhotel_booking_create_bookingincludes\booking\wphb-booking-hooks.php:20

actionhb_booking_status_changedincludes\booking\wphb-booking-hooks.php:21

actionhotel_booking_change_cancel_booking_statusincludes\booking\wphb-booking-hooks.php:34

actionhb_place_orderincludes\booking\wphb-booking-hooks.php:101

filterwp_mail_fromincludes\booking\wphb-booking-hooks.php:122

filterwp_mail_from_nameincludes\booking\wphb-booking-hooks.php:124

filterwp_mail_content_typeincludes\booking\wphb-booking-hooks.php:125

actionhb_booking_status_changedincludes\booking\wphb-booking-hooks.php:187

filterwp_mail_fromincludes\booking\wphb-booking-hooks.php:288

filterwp_mail_from_nameincludes\booking\wphb-booking-hooks.php:290

filterwp_mail_content_typeincludes\booking\wphb-booking-hooks.php:291

filterwp_mail_fromincludes\booking\wphb-booking-hooks.php:408

filterwp_mail_from_nameincludes\booking\wphb-booking-hooks.php:410

filterwp_mail_content_typeincludes\booking\wphb-booking-hooks.php:411

actionadmin_headincludes\booking\wphb-booking-hooks.php:430

actionwp_loadedincludes\cart\class-wphb-cart.php:70

actioninitincludes\cart\class-wphb-cart.php:73

actionwp_loadedincludes\class-wphb-block-template-config.php:28

filterget_block_templatesincludes\class-wphb-block-template-config.php:35

actioninitincludes\class-wphb-block-template-config.php:36

actioncomment_postincludes\class-wphb-comments.php:28

actionhotel_booking_single_room_before_tabs_content_hb_room_reviewsincludes\class-wphb-comments.php:29

filtercomments_templateincludes\class-wphb-comments.php:30

actionhotel_booking_single_room_after_tabs_hb_room_reviewsincludes\class-wphb-comments.php:32

filterhotel_booking_single_room_infomation_tabsincludes\class-wphb-comments.php:33

filtermanage_edit-comments_columnsincludes\class-wphb-comments.php:35

filtermanage_comments_custom_columnincludes\class-wphb-comments.php:36

actioncomment_form_afterincludes\class-wphb-comments.php:38

actionadd_meta_boxesincludes\class-wphb-comments.php:39

actionedit_commentincludes\class-wphb-comments.php:40

actionadmin_enqueue_scriptsincludes\class-wphb-comments.php:41

actionwp_footerincludes\class-wphb-comments.php:43

actionrest_api_initincludes\class-wphb-comments.php:44

actionpre_get_commentsincludes\class-wphb-comments.php:45

filterwp_privacy_personal_data_exportersincludes\class-wphb-gdpr.php:25

filterwp_privacy_personal_data_erasersincludes\class-wphb-gdpr.php:26

actionadd_meta_boxesincludes\class-wphb-meta-box.php:37

actionsave_postincludes\class-wphb-meta-box.php:38

actioninitincludes\class-wphb-post-types.php:32

actioninitincludes\class-wphb-post-types.php:33

actioninitincludes\class-wphb-post-types.php:34

actionadmin_menuincludes\class-wphb-post-types.php:37

actionadmin_head-edit-tags.phpincludes\class-wphb-post-types.php:38

filtermanage_edit-hb_room_capacity_columnsincludes\class-wphb-post-types.php:41

filtermanage_hb_room_capacity_custom_columnincludes\class-wphb-post-types.php:44

actiondelete_term_taxonomyincludes\class-wphb-post-types.php:46

filtermanage_hb_room_posts_columnsincludes\class-wphb-post-types.php:48

actionmanage_hb_room_posts_custom_columnincludes\class-wphb-post-types.php:49

actionadmin_enqueue_scriptsincludes\class-wphb-post-types.php:51

actionpre_get_postsincludes\class-wphb-post-types.php:54

filterposts_fieldsincludes\class-wphb-post-types.php:56

filterposts_join_pagedincludes\class-wphb-post-types.php:57

filterposts_whereincludes\class-wphb-post-types.php:58

filterposts_groupbyincludes\class-wphb-post-types.php:59

filterposts_orderbyincludes\class-wphb-post-types.php:60

filtermanage_hb_coupon_posts_columnsincludes\class-wphb-post-types.php:65

actionmanage_hb_coupon_posts_custom_columnincludes\class-wphb-post-types.php:66

filtermanage_edit-hb_booking_sortable_columnsincludes\class-wphb-post-types.php:69

filterpost_type_linkincludes\class-wphb-post-types.php:71

actionadmin_noticesincludes\class-wphb-settings.php:122

filtertemplate_includeincludes\class-wphb-template-loader.php:28

actionhotel_booking_before_cart_totalincludes\coupons\class-wphb-coupon-hooks.php:36

actioninitincludes\coupons\class-wphb-coupon-hooks.php:37

filterhb_cart_sub_totalincludes\coupons\class-wphb-coupon.php:47

filterhb_cart_sub_totalincludes\coupons\class-wphb-coupon.php:106

filterhb_cart_sub_totalincludes\coupons\class-wphb-coupon.php:129

filterthim_ekit/rest_api/select_query_conditionsincludes\elementor\modules\archive-room\class-rest-api.php:3

filterthim_ekit/elementor/widgets/listincludes\elementor\modules\class-init.php:52

filterthim_ekit/elementor/widget/file_pathincludes\elementor\modules\class-init.php:53

filterthim_ekit_elementor_categoryincludes\elementor\modules\class-init.php:54

filterthim_ekit/admin/enqueue/localizeincludes\elementor\modules\class-init.php:56

actionwp_enqueue_scriptsincludes\elementor\modules\class-init.php:68

actionWPHB/modules/single-room/before-preview-queryincludes\elementor\modules\single-room\class-init.php:16

actionWPHB/modules/single-room/after-preview-queryincludes\elementor\modules\single-room\class-init.php:17

filterthim_ekit/elementor/documents/preview_itemincludes\elementor\modules\single-room\class-init.php:18

filterhb_payment_method_title_offline-paymentincludes\gateways\offline-payment\class-wphb-payment-gateway-offline-payment.php:43

actionhb_manage_booking_column_totalincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:112

filterhb_payment_method_title_paypalincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:113

actionhb_do_transaction_paypal-standardincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:118

actionhb_web_hook_hotel-booking-paypal-standardincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:119

filterhb_payment_gatewaysincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:565

filterhotel_booking_addon_menusincludes\plugins\wp-hotel-booking-extra\inc\admin\class-hb-admin.php:14

actionhotel_booking_extra_settingsincludes\plugins\wp-hotel-booking-extra\inc\admin\class-hb-admin.php:15

filterhotel_booking_addon_menusincludes\plugins\wp-hotel-booking-extra\inc\admin\class-wphb-extra-admin.php:27

actionhotel_booking_extra_settingsincludes\plugins\wp-hotel-booking-extra\inc\admin\class-wphb-extra-admin.php:28

filterhotel_booking_add_to_cart_resultsincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:38

actionhotel_booking_before_mini_cart_loop_priceincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:41

filterhb_get_templateincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:44

filterhotel_booking_load_cart_from_sessionincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:47

actionhotel_booking_cart_after_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:62

actionhotel_booking_admin_cart_after_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:65

actionhotel_booking_email_new_bookingincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:68

filterhb_extra_cart_inputincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:70

actionhotel_booking_after_room_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:73

actionhotel_booking_email_after_room_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:76

filterhotel_booking_check_room_availableincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:87

filterhotel_booking_admin_load_order_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:88

actionhotel_booking_updated_order_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:90

filterhb_extra_cart_inputincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:466

actioninitincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-post-type.php:32

filtermanage_hb_extra_room_posts_columnsincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-post-type.php:35

actionmanage_hb_extra_room_posts_custom_columnincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-post-type.php:36

actioninitincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-settings.php:40

actionadmin_initincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-settings.php:41

actionhotel_booking_loop_after_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:33

actionhotel_booking_after_add_room_to_cart_formincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:34

filterwpbh_meta_box_room_settings_tabsincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:37

actionhotel_booking_room_after_quantityincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:39

actionhotel_booking_room_details_quantityincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:42

actionadmin_enqueue_scriptsincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:46

actionwp_enqueue_scriptsincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:47

filterhotel_booking_get_product_classincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:48

filterhb_admin_i18nincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:49

filterhb_plugins_templates_pathincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:50

actionrest_authentication_errorsincludes\rest-api\class-wphb-rest-authentication.php:20

actionwp_footerincludes\room\class-wphb-booking-room.php:37

filterhotel_booking_add_to_cart_resultsincludes\room\class-wphb-booking-room.php:44

actionwp_enqueue_scriptsincludes\shortcodes\class-wphb-shortcode-hotel-booking-mini-cart.php:24

actionwphb/loop-v2/room-contentincludes\template-hooks\class-wphb-search.php:5

actionwphb/loop-v2/room-infoincludes\template-hooks\class-wphb-search.php:6

actionwphb/loop-v2/room-metaincludes\template-hooks\class-wphb-search.php:7

actionhotel_booking_setting_field_tp_hotel_booking_external_link_settingsincludes\TemplateHooks\Admin\AdminExternalLinkIconSetting.php:15

actionwphb/list-rooms/layoutincludes\TemplateHooks\ArchiveRoomTemplate.php:20

actionhotel_booking_single_room_after_booking_formincludes\TemplateHooks\SingleRoomExternalLinkTemplate.php:15

actioninitincludes\wphb-core-functions.php:37

actionswitch_blogincludes\wphb-core-functions.php:38

actionnetwork_admin_noticesincludes\wphb-core-functions.php:258

actionadmin_noticesincludes\wphb-core-functions.php:259

actionadmin_noticesincludes\wphb-core-functions.php:263

actionwidgets_initincludes\wphb-core-functions.php:308

actioninitincludes\wphb-functions.php:532

actioninitincludes\wphb-functions.php:2122

actionwp_footerincludes\wphb-template-functions.php:681

actionhb_before_search_resultincludes\wphb-template-hooks.php:17

actionhb_lightbox_assets_lightbox2includes\wphb-template-hooks.php:18

actionhb_wrapper_startincludes\wphb-template-hooks.php:20

actionhotel_booking_before_main_contentincludes\wphb-template-hooks.php:23

actionhotel_booking_after_main_contentincludes\wphb-template-hooks.php:24

actionhotel_booking_sidebarincludes\wphb-template-hooks.php:25

actionhotel_booking_loop_room_thumbnailincludes\wphb-template-hooks.php:28

actionhotel_booking_loop_room_titleincludes\wphb-template-hooks.php:31

actionhotel_booking_single_room_titleincludes\wphb-template-hooks.php:32

actionhotel_booking_loop_room_priceincludes\wphb-template-hooks.php:38

actionhotel_booking_after_room_loopincludes\wphb-template-hooks.php:41

actionhotel_booking_single_room_galleryincludes\wphb-template-hooks.php:44

actionhotel_booking_single_room_infomationincludes\wphb-template-hooks.php:47

actionhotel_booking_after_single_productincludes\wphb-template-hooks.php:50

actionhotel_booking_single_room_infomationincludes\wphb-template-hooks.php:51

actionhotel_booking_loop_room_ratingincludes\wphb-template-hooks.php:54

actionhotel_booking_loop_room_featureincludes\wphb-template-hooks.php:57

filterbody_classincludes\wphb-template-hooks.php:58

actionthe_postincludes\wphb-template-hooks.php:62

filterthe_contentincludes\wphb-template-hooks.php:64

filterhotel_booking_single_room_infomation_tabsincludes\wphb-template-hooks.php:65

actionhotel_booking_after_single_roomincludes\wphb-template-hooks.php:68

actionhotel_booking_before_single_productincludes\wphb-template-hooks.php:72

actionwpincludes\wphb-webhooks.php:92

actionadmin_enqueue_scriptswp-hotel-booking.php:86

actionwp_enqueue_scriptswp-hotel-booking.php:87

actionwp_print_scriptswp-hotel-booking.php:88

actiontemplate_redirectwp-hotel-booking.php:89

actionplugin_loadedwp-hotel-booking.php:93

actioninitwp-hotel-booking.php:99

actionwp_initialize_sitewp-hotel-booking.php:102

filterwpmu_drop_tableswp-hotel-booking.php:104

actionadmin_initwp-hotel-booking.php:106

actionthim_ekit/modules/handlewp-hotel-booking.php:113

Scheduled Events 1

hotel_booking_change_cancel_booking_status

Maintenance & Trust

WP Hotel Booking Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedMar 11, 2026

PHP min version7.4

Downloads430K

Community Trust

Rating72/100

Number of ratings66

Active installs8K

Alternatives

WP Hotel Booking Alternatives

Sirvoy Booking Engine

sirvoy-booking-engine

100

Sirvoy booking engine - Non-Commission Direct Bookings from Your Website. Sirvoy can also help you to receive bookings from channels, and much more.

1K No CVEs

eaSYNC Booking – Hotels, Restaurants & Car Rentals

easync-booking

Simplify a Customer’s Booking Experience with eaSYNC Booking — a WordPress Booking Plugin for Hotels, Restaurants, and Car Rentals!

100 5 CVEs

WP Booking System – Booking Calendar

wp-booking-system

The booking calendar plugin for WordPress. Get easy online booking with this lightweight and powerful booking calendar.

20K 7 CVEs

MotoPress Hotel Booking

motopress-hotel-booking-lite

The #1 Hotel Booking and Vacation Rental Plugin for WordPress. Online payments, seasons, rates, free or paid extras, coupons, taxes & fees.

10K 4 CVEs

MotoPress Hotel Booking for Elementor

mphb-elementor

100

Build your property rental website visually with MotoPress Hotel Booking plugin shortcodes and Elementor.

10K No CVEs

Developer Profile

WP Hotel Booking Developer Profile

ThimPress

21 plugins · 209K total installs

trust score

Avg Security Score

87/100

Avg Patch Time

265 days

View full developer profile

Detection Fingerprints

How We Detect WP Hotel Booking

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/wp-hotel-booking/assets/css/frontend.css/wp-content/plugins/wp-hotel-booking/assets/css/frontend.min.css/wp-content/plugins/wp-hotel-booking/assets/js/frontend.js/wp-content/plugins/wp-hotel-booking/assets/js/frontend.min.js/wp-content/plugins/wp-hotel-booking/assets/css/booking-form.css/wp-content/plugins/wp-hotel-booking/assets/css/booking-form.min.css/wp-content/plugins/wp-hotel-booking/assets/js/booking-form.js/wp-content/plugins/wp-hotel-booking/assets/js/booking-form.min.js+41 more

Script Paths

/wp-content/plugins/wp-hotel-booking/assets/js/frontend.js/wp-content/plugins/wp-hotel-booking/assets/js/frontend.min.js/wp-content/plugins/wp-hotel-booking/assets/js/booking-form.js/wp-content/plugins/wp-hotel-booking/assets/js/booking-form.min.js/wp-content/plugins/wp-hotel-booking/assets/js/checkout.js/wp-content/plugins/wp-hotel-booking/assets/js/checkout.min.js+18 more

Version Parameters

wp-hotel-booking/assets/css/frontend.css?ver=wp-hotel-booking/assets/js/frontend.js?ver=wp-hotel-booking/assets/css/booking-form.css?ver=wp-hotel-booking/assets/js/booking-form.js?ver=wp-hotel-booking/assets/css/checkout.css?ver=wp-hotel-booking/assets/js/checkout.js?ver=wp-hotel-booking/assets/css/responsive.css?ver=wp-hotel-booking/assets/css/admin.css?ver=wp-hotel-booking/assets/js/admin.js?ver=wp-hotel-booking/assets/css/wp-hotel-booking-shortcodes.css?ver=wp-hotel-booking/assets/js/wp-hotel-booking-shortcodes.js?ver=wp-hotel-booking/assets/css/hotel-booking-room-search.css?ver=wp-hotel-booking/assets/js/hotel-booking-room-search.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-details.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-details.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-carousel.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-carousel.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-grid.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-grid.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-list.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-list.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-search-form.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-search-form.js?ver=wp-hotel-booking-extra/assets/css/admin.min.css?ver=wp-hotel-booking-extra/assets/js/admin.js?ver=wp-hotel-booking-extra/assets/css/site.css?ver=wp-hotel-booking-extra/assets/js/site.js?ver=

HTML / DOM Fingerprints

CSS Classes

wp-hotel-bookingthim-hotel-bookingwp-hotel-booking-room-search-formtp-hotel-booking-room-searchtp-hotel-booking-room-detailstp-hotel-booking-room-carouseltp-hotel-booking-room-gridtp-hotel-booking-room-list+1 more

HTML Comments

+2 more

Data Attributes

data-plugin-name="WP Hotel Booking"data-plugin-uri="http://thimpress.com/"data-plugin-version="2.3.0"data-thim-hotel-booking

JS Globals

WP_Hotel_Booking_FrontendWP_Hotel_Booking_Frontend_ParamsWP_Hotel_Booking_Booking_FormWP_Hotel_Booking_Booking_Form_ParamsWP_Hotel_Booking_CheckoutWP_Hotel_Booking_Checkout_Params+1 more

REST Endpoints

/wp-json/wp-hotel-booking/v1/search/wp-json/wp-hotel-booking/v1/booking

Shortcode Output

[hotel_booking_room_search][hotel_booking_room_details][hotel_booking_room_carousel][hotel_booking_room_grid]

FAQ

WP Hotel Booking Security & Risk Analysis

Is WP Hotel Booking Safe to Use in 2026?

High Risk

Key Concerns

WP Hotel Booking Security Vulnerabilities

CVEs by Year

Severity Breakdown

WP Hotel Booking Code Analysis

Dangerous Functions Found

Bundled Libraries

SQL Query Safety

Output Escaping

Data Flow Analysis

WP Hotel Booking Attack Surface

AJAX Handlers 7

REST API Routes 1

Scheduled Events 1

WP Hotel Booking Maintenance & Trust

Maintenance Signals

Community Trust

WP Hotel Booking Alternatives

Sirvoy Booking Engine

eaSYNC Booking – Hotels, Restaurants & Car Rentals

WP Booking System – Booking Calendar

MotoPress Hotel Booking

MotoPress Hotel Booking for Elementor

WP Hotel Booking Developer Profile

How We Detect WP Hotel Booking

Asset Fingerprints

HTML / DOM Fingerprints

Frequently Asked Questions about WP Hotel Booking