WP-Safety

WP Hotel Booking Security & Risk Analysis

wordpress.org/plugins/wp-hotel-booking

WordPress Hotel Booking Plugin - A complete hotel booking reservation plugin for WordPress.

7K active installs v2.3.4 PHP 7.4+ WP 6.4+ Updated Jul 20, 2026
accommodationbooking-systemhotel-bookingreservationroom-management
76
B · Generally Safe
CVEs total23
Unpatched0
Last CVEJul 10, 2026
Plugin page Download
Safety Verdict

Is WP Hotel Booking Safe to Use in 2026?

Mostly Safe

Score 76/100

WP Hotel Booking is generally safe to use. 23 past CVEs were resolved.

23 known CVEsLast CVE: Jul 10, 2026Updated 1mo ago
Risk Assessment

The wp-hotel-booking plugin v2.3.0 presents a mixed security posture. While it demonstrates good practices in several areas, such as a high percentage of SQL queries using prepared statements and a strong presence of nonces and capability checks, significant concerns remain. The static analysis reveals a potential risk due to the presence of the `unserialize` function, which can be a gateway for unserialize vulnerabilities if not handled with extreme caution and input validation. Furthermore, the taint analysis flagged one high-severity flow with unsanitized paths, indicating a potential weakness where user input could be manipulated to affect application logic or data.

Key Concerns

  • Unpatched CVE
  • High severity taint flow
  • Dangerous function: unserialize
  • Significant historical CVEs
  • Several critical and high severity CVEs historically
Vulnerabilities
23 published

WP Hotel Booking Security Vulnerabilities

CVEs by Year

2 CVEs in 2020
2020
2 CVEs in 2022
2022
3 CVEs in 2023
2023
5 CVEs in 2024
2024
7 CVEs in 2025
2025
4 CVEs in 2026
2026
Patched Has unpatched

Severity Breakdown

Critical
3
High
4
Medium
16

23 total CVEs

CVE-2026-11901medium · 5.3Insufficient Verification of Data Authenticity

WP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN Handler

Jul 10, 2026 Patched in 2.3.2 (1d)
CVE-2026-11392medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date' and 'check_out_date' Parameters

Jul 9, 2026 Patched in 2.3.2 (1d)
CVE-2026-9822medium · 4.3Missing Authorization

WP Hotel Booking < 2.3.1 - Missing Authorization

Jun 19, 2026 Patched in 2.3.1 (5d)
CVE-2025-14075medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter

Jan 16, 2026 Patched in 2.2.8 (1d)
CVE-2025-63012medium · 4.3Cross-Site Request Forgery (CSRF)

Hotel Booking <= 2.2.8 - Cross-Site Request Forgery

Nov 5, 2025 Patched in 2.2.9 (114d)
CVE-2025-63013medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Hotel Booking <= 2.2.7 - Unauthenticated Information Exposure

Nov 5, 2025 Patched in 2.2.8 (84d)
CVE-2025-63011medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Hotel Booking <= 2.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting

Nov 5, 2025 Patched in 2.2.9 (114d)
CVE-2025-8942medium · 4.3Missing Authorization

WP Hotel Booking <= 2.2.1 - Improper Input Validation to Authenticated (Subscriber+) Rating Manipulation

Aug 28, 2025 Patched in 2.2.3 (29d)
CVE-2025-47448medium · 4.3Cross-Site Request Forgery (CSRF)

WP Hotel Booking <= 2.1.9 - Cross-Site Request Forgery

May 7, 2025 Patched in 2.2.0 (7d)
CVE-2024-13447medium · 4.3Missing Authorization

WP Hotel Booking <= 2.1.6 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval

Jan 21, 2025 Patched in 2.1.7 (1d)
CVE-2024-12370medium · 5.3Improper Access Control

WP Hotel Booking <= 2.1.5 - Missing Authorization

Jan 16, 2025 Patched in 2.1.6 (1d)
CVE-2024-51582high · 8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

WP Hotel Booking <= 2.2.9 - Authenticated (Contributor+) Local File Inclusion

Oct 31, 2024 Patched in 2.3.0 (531d)
CVE-2024-7855high · 8.8Unrestricted Upload of File with Dangerous Type

WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload

Oct 1, 2024 Patched in 2.1.3 (1d)
CVE-2024-3605critical · 10Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

Jun 19, 2024 Patched in 2.1.1 (22d)
CVE-2024-30508medium · 5.3Missing Authorization

WP Hotel Booking <= 2.0.9.2 - Missing Authorization

Mar 28, 2024 Patched in 2.0.9.3 (7d)
WF-86f15e94-6ca7-4eb2-8a38-b4add9251dab-wp-hotel-bookingmedium · 6.5Improper Authorization

WP Hotel Booking <= 2.0.9.2 - Improper Authorization on Multiple REST API Routes

Feb 3, 2024 Patched in 2.0.9.3 (4d)
CVE-2023-5799medium · 4.3Incorrect Authorization

WP Hotel Booking <= 2.0.8 - Insufficient Authorization to Unauthorized Post Deletion

Oct 26, 2023 Patched in 2.0.9 (89d)
CVE-2023-5652critical · 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection

Oct 26, 2023 Patched in 2.0.8 (89d)
CVE-2023-5651medium · 6.5Missing Authorization

WP Hotel Booking <= 2.0.7 - Missing Authorization to (Subscriber+) Arbitrary Post Deletion

Oct 20, 2023 Patched in 2.0.8 (371d)
WF-b56a5ff2-10cb-4eee-9409-7f8a22d00358-wp-hotel-bookinghigh · 7.5Missing Authorization

WP Hotel Booking <= 2.0.0 - Missing Authorization to Settings Update

Aug 22, 2022 Patched in 2.0.1 (519d)
CVE-2021-36852high · 8.8Cross-Site Request Forgery (CSRF)

WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery

Aug 2, 2022 Patched in 1.10.6 (539d)
CVE-2020-29047critical · 9.8Deserialization of Untrusted Data

WP Hotel Booking <= 1.10.3 - Remote Code Execution

Dec 8, 2020 Patched in 1.10.4 (1141d)
CVE-2020-36757medium · 4.3Cross-Site Request Forgery (CSRF)

WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass

Sep 16, 2020 Patched in 1.10.2 (1224d)
Version History

WP Hotel Booking Release Timeline

v2.3.4Current
v2.3.3
v2.3.2
v2.3.12 CVEs
CVE-2026-11901 CVE-2026-11392
v2.3.03 CVEs
CVE-2026-9822 CVE-2026-11901 CVE-2026-11392
v2.2.94 CVEs
CVE-2024-51582 CVE-2026-9822 CVE-2026-11901 +1 more
v2.2.86 CVEs
CVE-2024-51582 CVE-2025-63012 CVE-2025-63011 +3 more
v2.2.78 CVEs
CVE-2025-14075 CVE-2024-51582 CVE-2025-63012 +5 more
v2.2.68 CVEs
CVE-2025-14075 CVE-2024-51582 CVE-2025-63012 +5 more
v2.2.58 CVEs
CVE-2025-14075 CVE-2024-51582 CVE-2025-63012 +5 more
v2.2.48 CVEs
CVE-2025-14075 CVE-2024-51582 CVE-2025-63012 +5 more
v2.2.38 CVEs
CVE-2025-14075 CVE-2024-51582 CVE-2025-63012 +5 more
v2.2.29 CVEs
CVE-2025-14075 CVE-2024-51582 CVE-2025-8942 +6 more
v2.2.19 CVEs
CVE-2025-14075 CVE-2024-51582 CVE-2025-8942 +6 more
v2.2.09 CVEs
CVE-2025-14075 CVE-2024-51582 CVE-2025-8942 +6 more
v2.1.910 CVEs
CVE-2025-14075 CVE-2025-47448 CVE-2024-51582 +7 more
v2.1.810 CVEs
CVE-2025-14075 CVE-2025-47448 CVE-2024-51582 +7 more
v2.1.710 CVEs
CVE-2025-14075 CVE-2025-47448 CVE-2024-51582 +7 more
v2.1.611 CVEs
CVE-2025-14075 CVE-2025-47448 CVE-2024-51582 +8 more
v2.1.512 CVEs
CVE-2025-14075 CVE-2025-47448 CVE-2024-51582 +9 more
Code Analysis
Analyzed Mar 16, 2026

WP Hotel Booking Code Analysis

Dangerous Functions
1
Raw SQL Queries
9
73 prepared
Unescaped Output
311
1543 escaped
Nonce Checks
35
Capability Checks
18
File Operations
6
External Requests
4
Bundled Libraries
1

Dangerous Functions Found

unserialize$sub_items = unserialize( $sub_items_data );includes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:604

Bundled Libraries

Select2

SQL Query Safety

89% prepared82 total queries

Output Escaping

83% escaped1854 total outputs
Data Flows · Security
11 unsanitized

Data Flow Analysis

19 flows11 with unsanitized paths
selected_style_list (includes\elementor\widgets\global\filter-room-selected.php:272)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WP Hotel Booking Attack Surface

Entry Points8
Unprotected0

AJAX Handlers 7

authwp_ajax_tp_hotel_booking_remove_packageincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:58
noprivwp_ajax_tp_hotel_booking_remove_packageincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:59
authwp_ajax_tp_extra_package_removeincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-post-type.php:40
authwp_ajax_check_room_availabelincludes\room\class-wphb-booking-room.php:41
noprivwp_ajax_check_room_availabelincludes\room\class-wphb-booking-room.php:42
authwp_ajax_hotel_booking_single_check_room_availableincludes\room\class-wphb-booking-room.php:46
noprivwp_ajax_hotel_booking_single_check_room_availableincludes\room\class-wphb-booking-room.php:53

REST API Routes 1

GET/wp-json/hb-room/v1/update-reviewincludes\class-wphb-comments.php:83
WordPress Hooks 205
actionrest_api_initincludes\abstracts\class-wphb-abstract-rest-api.php:45
filterrest_pre_serve_requestincludes\abstracts\class-wphb-abstract-rest-controller.php:52
filterwphb/admin/tool-tabsincludes\abstracts\class-wphb-abstract-tool.php:44
actionadmin_menuincludes\admin\class-wphb-admin-menu.php:27
actionadmin_bar_menuincludes\admin\class-wphb-admin-menu.php:28
filterhb_admin_settings_tabsincludes\admin\class-wphb-admin-setting-page.php:31
actioninitincludes\admin\class-wphb-admin.php:36
actionwpbh_meta_box_room_general_fieldsincludes\admin\class-wphb-admin.php:41
actionadmin_noticesincludes\admin\class-wphb-admin.php:42
actionadd_meta_boxesincludes\admin\metaboxes\class-wphb-admin-metabox-booking-actions.php:35
actionsave_postincludes\admin\metaboxes\class-wphb-admin-metabox-booking-actions.php:36
actionadd_meta_boxesincludes\admin\metaboxes\class-wphb-admin-metabox-booking-details.php:35
actionsave_postincludes\admin\metaboxes\class-wphb-admin-metabox-booking-details.php:36
actionadd_meta_boxesincludes\admin\metaboxes\class-wphb-admin-metabox-booking-items.php:35
actionsave_postincludes\admin\metaboxes\class-wphb-admin-metabox-booking-items.php:36
actionadmin_menuincludes\admin\setup\class-wphb-setup-wizard.php:22
actionadmin_initincludes\admin\setup\class-wphb-setup-wizard.php:23
actionadmin_enqueue_scriptsincludes\admin\setup\class-wphb-setup-wizard.php:24
actionadmin_noticesincludes\admin\setup\class-wphb-setup-wizard.php:25
actionadmin_initincludes\admin\wphb-admin-functions.php:22
actionhb_booking_status_changedincludes\admin\wphb-admin-functions.php:257
actionadmin_initincludes\admin\wphb-admin-functions.php:281
filtermanage_hb_booking_posts_columnsincludes\admin\wphb-admin-functions.php:318
actionmanage_hb_booking_posts_custom_columnincludes\admin\wphb-admin-functions.php:396
filterrequestincludes\admin\wphb-admin-functions.php:422
actionrestrict_manage_postsincludes\admin\wphb-admin-functions.php:424
filterthe_titleincludes\admin\wphb-admin-functions.php:480
actionadmin_head-edit.phpincludes\admin\wphb-admin-functions.php:484
actionadmin_print_scriptsincludes\admin\wphb-admin-functions.php:554
filterhb_meta_box_update_meta_valueincludes\admin\wphb-admin-functions.php:578
actionhb_booking_detail_update_meta_boxincludes\admin\wphb-admin-functions.php:615
actionsave_postincludes\admin\wphb-admin-functions.php:634
actionhb_update_meta_box_gallery_settingsincludes\admin\wphb-admin-functions.php:637
actiondo_meta_boxesincludes\admin\wphb-admin-functions.php:663
filterimage_resize_dimensionsincludes\aq_resizer.php:71
actiondelete_postincludes\booking\class-wphb-booking-room-available.php:33
actionsave_postincludes\booking\class-wphb-booking-room-available.php:34
actionhb_booking_status_changedincludes\booking\class-wphb-booking-room-available.php:35
actionhotel_booking_create_bookingincludes\booking\wphb-booking-hooks.php:20
actionhb_booking_status_changedincludes\booking\wphb-booking-hooks.php:21
actionhotel_booking_change_cancel_booking_statusincludes\booking\wphb-booking-hooks.php:34
actionhb_place_orderincludes\booking\wphb-booking-hooks.php:101
filterwp_mail_fromincludes\booking\wphb-booking-hooks.php:122
filterwp_mail_from_nameincludes\booking\wphb-booking-hooks.php:124
filterwp_mail_content_typeincludes\booking\wphb-booking-hooks.php:125
actionhb_booking_status_changedincludes\booking\wphb-booking-hooks.php:187
filterwp_mail_fromincludes\booking\wphb-booking-hooks.php:288
filterwp_mail_from_nameincludes\booking\wphb-booking-hooks.php:290
filterwp_mail_content_typeincludes\booking\wphb-booking-hooks.php:291
filterwp_mail_fromincludes\booking\wphb-booking-hooks.php:408
filterwp_mail_from_nameincludes\booking\wphb-booking-hooks.php:410
filterwp_mail_content_typeincludes\booking\wphb-booking-hooks.php:411
actionadmin_headincludes\booking\wphb-booking-hooks.php:430
actionwp_loadedincludes\cart\class-wphb-cart.php:70
actioninitincludes\cart\class-wphb-cart.php:73
actionwp_loadedincludes\class-wphb-block-template-config.php:28
filterget_block_templatesincludes\class-wphb-block-template-config.php:35
actioninitincludes\class-wphb-block-template-config.php:36
actioncomment_postincludes\class-wphb-comments.php:28
actionhotel_booking_single_room_before_tabs_content_hb_room_reviewsincludes\class-wphb-comments.php:29
filtercomments_templateincludes\class-wphb-comments.php:30
actionhotel_booking_single_room_after_tabs_hb_room_reviewsincludes\class-wphb-comments.php:32
filterhotel_booking_single_room_infomation_tabsincludes\class-wphb-comments.php:33
filtermanage_edit-comments_columnsincludes\class-wphb-comments.php:35
filtermanage_comments_custom_columnincludes\class-wphb-comments.php:36
actioncomment_form_afterincludes\class-wphb-comments.php:38
actionadd_meta_boxesincludes\class-wphb-comments.php:39
actionedit_commentincludes\class-wphb-comments.php:40
actionadmin_enqueue_scriptsincludes\class-wphb-comments.php:41
actionwp_footerincludes\class-wphb-comments.php:43
actionrest_api_initincludes\class-wphb-comments.php:44
actionpre_get_commentsincludes\class-wphb-comments.php:45
filterwp_privacy_personal_data_exportersincludes\class-wphb-gdpr.php:25
filterwp_privacy_personal_data_erasersincludes\class-wphb-gdpr.php:26
actionadd_meta_boxesincludes\class-wphb-meta-box.php:37
actionsave_postincludes\class-wphb-meta-box.php:38
actioninitincludes\class-wphb-post-types.php:32
actioninitincludes\class-wphb-post-types.php:33
actioninitincludes\class-wphb-post-types.php:34
actionadmin_menuincludes\class-wphb-post-types.php:37
actionadmin_head-edit-tags.phpincludes\class-wphb-post-types.php:38
filtermanage_edit-hb_room_capacity_columnsincludes\class-wphb-post-types.php:41
filtermanage_hb_room_capacity_custom_columnincludes\class-wphb-post-types.php:44
actiondelete_term_taxonomyincludes\class-wphb-post-types.php:46
filtermanage_hb_room_posts_columnsincludes\class-wphb-post-types.php:48
actionmanage_hb_room_posts_custom_columnincludes\class-wphb-post-types.php:49
actionadmin_enqueue_scriptsincludes\class-wphb-post-types.php:51
actionpre_get_postsincludes\class-wphb-post-types.php:54
filterposts_fieldsincludes\class-wphb-post-types.php:56
filterposts_join_pagedincludes\class-wphb-post-types.php:57
filterposts_whereincludes\class-wphb-post-types.php:58
filterposts_groupbyincludes\class-wphb-post-types.php:59
filterposts_orderbyincludes\class-wphb-post-types.php:60
filtermanage_hb_coupon_posts_columnsincludes\class-wphb-post-types.php:65
actionmanage_hb_coupon_posts_custom_columnincludes\class-wphb-post-types.php:66
filtermanage_edit-hb_booking_sortable_columnsincludes\class-wphb-post-types.php:69
filterpost_type_linkincludes\class-wphb-post-types.php:71
actionadmin_noticesincludes\class-wphb-settings.php:122
filtertemplate_includeincludes\class-wphb-template-loader.php:28
actionhotel_booking_before_cart_totalincludes\coupons\class-wphb-coupon-hooks.php:36
actioninitincludes\coupons\class-wphb-coupon-hooks.php:37
filterhb_cart_sub_totalincludes\coupons\class-wphb-coupon.php:47
filterhb_cart_sub_totalincludes\coupons\class-wphb-coupon.php:106
filterhb_cart_sub_totalincludes\coupons\class-wphb-coupon.php:129
filterthim_ekit/rest_api/select_query_conditionsincludes\elementor\modules\archive-room\class-rest-api.php:3
filterthim_ekit/elementor/widgets/listincludes\elementor\modules\class-init.php:52
filterthim_ekit/elementor/widget/file_pathincludes\elementor\modules\class-init.php:53
filterthim_ekit_elementor_categoryincludes\elementor\modules\class-init.php:54
filterthim_ekit/admin/enqueue/localizeincludes\elementor\modules\class-init.php:56
actionwp_enqueue_scriptsincludes\elementor\modules\class-init.php:68
actionWPHB/modules/single-room/before-preview-queryincludes\elementor\modules\single-room\class-init.php:16
actionWPHB/modules/single-room/after-preview-queryincludes\elementor\modules\single-room\class-init.php:17
filterthim_ekit/elementor/documents/preview_itemincludes\elementor\modules\single-room\class-init.php:18
filterhb_payment_method_title_offline-paymentincludes\gateways\offline-payment\class-wphb-payment-gateway-offline-payment.php:43
actionhb_manage_booking_column_totalincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:112
filterhb_payment_method_title_paypalincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:113
actionhb_do_transaction_paypal-standardincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:118
actionhb_web_hook_hotel-booking-paypal-standardincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:119
filterhb_payment_gatewaysincludes\gateways\paypal\class-wphb-payment-gateway-paypal.php:565
filterhotel_booking_addon_menusincludes\plugins\wp-hotel-booking-extra\inc\admin\class-hb-admin.php:14
actionhotel_booking_extra_settingsincludes\plugins\wp-hotel-booking-extra\inc\admin\class-hb-admin.php:15
filterhotel_booking_addon_menusincludes\plugins\wp-hotel-booking-extra\inc\admin\class-wphb-extra-admin.php:27
actionhotel_booking_extra_settingsincludes\plugins\wp-hotel-booking-extra\inc\admin\class-wphb-extra-admin.php:28
filterhotel_booking_add_to_cart_resultsincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:38
actionhotel_booking_before_mini_cart_loop_priceincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:41
filterhb_get_templateincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:44
filterhotel_booking_load_cart_from_sessionincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:47
actionhotel_booking_cart_after_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:62
actionhotel_booking_admin_cart_after_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:65
actionhotel_booking_email_new_bookingincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:68
filterhb_extra_cart_inputincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:70
actionhotel_booking_after_room_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:73
actionhotel_booking_email_after_room_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:76
filterhotel_booking_check_room_availableincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:87
filterhotel_booking_admin_load_order_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:88
actionhotel_booking_updated_order_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:90
filterhb_extra_cart_inputincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-cart.php:466
actioninitincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-post-type.php:32
filtermanage_hb_extra_room_posts_columnsincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-post-type.php:35
actionmanage_hb_extra_room_posts_custom_columnincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-post-type.php:36
actioninitincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-settings.php:40
actionadmin_initincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra-settings.php:41
actionhotel_booking_loop_after_itemincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:33
actionhotel_booking_after_add_room_to_cart_formincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:34
filterwpbh_meta_box_room_settings_tabsincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:37
actionhotel_booking_room_after_quantityincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:39
actionhotel_booking_room_details_quantityincludes\plugins\wp-hotel-booking-extra\inc\class-wphb-extra.php:42
actionadmin_enqueue_scriptsincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:46
actionwp_enqueue_scriptsincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:47
filterhotel_booking_get_product_classincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:48
filterhb_admin_i18nincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:49
filterhb_plugins_templates_pathincludes\plugins\wp-hotel-booking-extra\wp-hotel-booking-extra.php:50
actionrest_authentication_errorsincludes\rest-api\class-wphb-rest-authentication.php:20
actionwp_footerincludes\room\class-wphb-booking-room.php:37
filterhotel_booking_add_to_cart_resultsincludes\room\class-wphb-booking-room.php:44
actionwp_enqueue_scriptsincludes\shortcodes\class-wphb-shortcode-hotel-booking-mini-cart.php:24
actionwphb/loop-v2/room-contentincludes\template-hooks\class-wphb-search.php:5
actionwphb/loop-v2/room-infoincludes\template-hooks\class-wphb-search.php:6
actionwphb/loop-v2/room-metaincludes\template-hooks\class-wphb-search.php:7
actionhotel_booking_setting_field_tp_hotel_booking_external_link_settingsincludes\TemplateHooks\Admin\AdminExternalLinkIconSetting.php:15
actionwphb/list-rooms/layoutincludes\TemplateHooks\ArchiveRoomTemplate.php:20
actionhotel_booking_single_room_after_booking_formincludes\TemplateHooks\SingleRoomExternalLinkTemplate.php:15
actioninitincludes\wphb-core-functions.php:37
actionswitch_blogincludes\wphb-core-functions.php:38
actionnetwork_admin_noticesincludes\wphb-core-functions.php:258
actionadmin_noticesincludes\wphb-core-functions.php:259
actionadmin_noticesincludes\wphb-core-functions.php:263
actionwidgets_initincludes\wphb-core-functions.php:308
actioninitincludes\wphb-functions.php:532
actioninitincludes\wphb-functions.php:2122
actionwp_footerincludes\wphb-template-functions.php:681
actionhb_before_search_resultincludes\wphb-template-hooks.php:17
actionhb_lightbox_assets_lightbox2includes\wphb-template-hooks.php:18
actionhb_wrapper_startincludes\wphb-template-hooks.php:20
actionhotel_booking_before_main_contentincludes\wphb-template-hooks.php:23
actionhotel_booking_after_main_contentincludes\wphb-template-hooks.php:24
actionhotel_booking_sidebarincludes\wphb-template-hooks.php:25
actionhotel_booking_loop_room_thumbnailincludes\wphb-template-hooks.php:28
actionhotel_booking_loop_room_titleincludes\wphb-template-hooks.php:31
actionhotel_booking_single_room_titleincludes\wphb-template-hooks.php:32
actionhotel_booking_loop_room_priceincludes\wphb-template-hooks.php:38
actionhotel_booking_after_room_loopincludes\wphb-template-hooks.php:41
actionhotel_booking_single_room_galleryincludes\wphb-template-hooks.php:44
actionhotel_booking_single_room_infomationincludes\wphb-template-hooks.php:47
actionhotel_booking_after_single_productincludes\wphb-template-hooks.php:50
actionhotel_booking_single_room_infomationincludes\wphb-template-hooks.php:51
actionhotel_booking_loop_room_ratingincludes\wphb-template-hooks.php:54
actionhotel_booking_loop_room_featureincludes\wphb-template-hooks.php:57
filterbody_classincludes\wphb-template-hooks.php:58
actionthe_postincludes\wphb-template-hooks.php:62
filterthe_contentincludes\wphb-template-hooks.php:64
filterhotel_booking_single_room_infomation_tabsincludes\wphb-template-hooks.php:65
actionhotel_booking_after_single_roomincludes\wphb-template-hooks.php:68
actionhotel_booking_before_single_productincludes\wphb-template-hooks.php:72
actionwpincludes\wphb-webhooks.php:92
actionadmin_enqueue_scriptswp-hotel-booking.php:86
actionwp_enqueue_scriptswp-hotel-booking.php:87
actionwp_print_scriptswp-hotel-booking.php:88
actiontemplate_redirectwp-hotel-booking.php:89
actionplugin_loadedwp-hotel-booking.php:93
actioninitwp-hotel-booking.php:99
actionwp_initialize_sitewp-hotel-booking.php:102
filterwpmu_drop_tableswp-hotel-booking.php:104
actionadmin_initwp-hotel-booking.php:106
actionthim_ekit/modules/handlewp-hotel-booking.php:113

Scheduled Events 1

hotel_booking_change_cancel_booking_status
Maintenance & Trust

WP Hotel Booking Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 20, 2026
PHP min version7.4
Downloads449K

Community Trust

Rating74/100
Number of ratings67
Active installs7K
Alternatives

WP Hotel Booking Alternatives

Sirvoy Booking Engine

Sirvoy Booking Engine

sirvoy-booking-engine

A
100

Sirvoy booking engine - Non-Commission Direct Bookings from Your Website. Sirvoy can also help you to receive bookings from channels, and much more.

1K No CVEs
eaSYNC Booking – Hotels, Restaurants & Car Rentals

eaSYNC Booking – Hotels, Restaurants & Car Rentals

easync-booking

A
96

Simplify a Customer’s Booking Experience with eaSYNC Booking — a WordPress Booking Plugin for Hotels, Restaurants, and Car Rentals!

100 5 CVEs
Hotel Booking for WooCommerce

Hotel Booking for WooCommerce

hotel-booking-for-woocommerce

A
100

Adds a reservation system for a hotel, B&B, villa, apartments, hostel, or any similar accommodation into your WooCommerce website easily!

100 No CVEs
WP Booking System – Booking Calendar

WP Booking System – Booking Calendar

wp-booking-system

A
89

The booking calendar plugin for WordPress. Get easy online booking with this lightweight and powerful booking calendar.

20K 7 CVEs
MotoPress Hotel Booking

MotoPress Hotel Booking

motopress-hotel-booking-lite

B
83

The #1 Hotel Booking and Vacation Rental Plugin for WordPress. Online payments, seasons, rates, free or paid extras, coupons, taxes & fees.

10K 6 CVEs
Developer Profile

WP Hotel Booking Developer Profile

ThimPress

23 plugins · 186K total installs

73
trust score
Avg Security Score
91/100
Avg Patch Time
234 days
View full developer profile
Detection Fingerprints

How We Detect WP Hotel Booking

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-hotel-booking/assets/css/frontend.css/wp-content/plugins/wp-hotel-booking/assets/css/frontend.min.css/wp-content/plugins/wp-hotel-booking/assets/js/frontend.js/wp-content/plugins/wp-hotel-booking/assets/js/frontend.min.js/wp-content/plugins/wp-hotel-booking/assets/css/booking-form.css/wp-content/plugins/wp-hotel-booking/assets/css/booking-form.min.css/wp-content/plugins/wp-hotel-booking/assets/js/booking-form.js/wp-content/plugins/wp-hotel-booking/assets/js/booking-form.min.js+41 more
Script Paths
/wp-content/plugins/wp-hotel-booking/assets/js/frontend.js/wp-content/plugins/wp-hotel-booking/assets/js/frontend.min.js/wp-content/plugins/wp-hotel-booking/assets/js/booking-form.js/wp-content/plugins/wp-hotel-booking/assets/js/booking-form.min.js/wp-content/plugins/wp-hotel-booking/assets/js/checkout.js/wp-content/plugins/wp-hotel-booking/assets/js/checkout.min.js+18 more
Version Parameters
wp-hotel-booking/assets/css/frontend.css?ver=wp-hotel-booking/assets/js/frontend.js?ver=wp-hotel-booking/assets/css/booking-form.css?ver=wp-hotel-booking/assets/js/booking-form.js?ver=wp-hotel-booking/assets/css/checkout.css?ver=wp-hotel-booking/assets/js/checkout.js?ver=wp-hotel-booking/assets/css/responsive.css?ver=wp-hotel-booking/assets/css/admin.css?ver=wp-hotel-booking/assets/js/admin.js?ver=wp-hotel-booking/assets/css/wp-hotel-booking-shortcodes.css?ver=wp-hotel-booking/assets/js/wp-hotel-booking-shortcodes.js?ver=wp-hotel-booking/assets/css/hotel-booking-room-search.css?ver=wp-hotel-booking/assets/js/hotel-booking-room-search.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-details.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-details.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-carousel.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-carousel.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-grid.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-grid.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-list.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-list.js?ver=wp-hotel-booking/assets/css/tp-hotel-booking-room-search-form.css?ver=wp-hotel-booking/assets/js/tp-hotel-booking-room-search-form.js?ver=wp-hotel-booking-extra/assets/css/admin.min.css?ver=wp-hotel-booking-extra/assets/js/admin.js?ver=wp-hotel-booking-extra/assets/css/site.css?ver=wp-hotel-booking-extra/assets/js/site.js?ver=

HTML / DOM Fingerprints

CSS Classes
wp-hotel-bookingthim-hotel-bookingwp-hotel-booking-room-search-formtp-hotel-booking-room-searchtp-hotel-booking-room-detailstp-hotel-booking-room-carouseltp-hotel-booking-room-gridtp-hotel-booking-room-list+1 more
HTML Comments
<!-- WP Hotel Booking -- Room Search Form --><!-- WP Hotel Booking -- Room Details --><!-- WP Hotel Booking -- Room Carousel --><!-- WP Hotel Booking -- Room Grid -->+2 more
Data Attributes
data-plugin-name="WP Hotel Booking"data-plugin-uri="http://thimpress.com/"data-plugin-version="2.3.0"data-thim-hotel-booking
JS Globals
WP_Hotel_Booking_FrontendWP_Hotel_Booking_Frontend_ParamsWP_Hotel_Booking_Booking_FormWP_Hotel_Booking_Booking_Form_ParamsWP_Hotel_Booking_CheckoutWP_Hotel_Booking_Checkout_Params+1 more
REST Endpoints
/wp-json/wp-hotel-booking/v1/search/wp-json/wp-hotel-booking/v1/booking
Shortcode Output
[hotel_booking_room_search][hotel_booking_room_details][hotel_booking_room_carousel][hotel_booking_room_grid]
FAQ

Frequently Asked Questions about WP Hotel Booking