CVE-2025-13135

CVE-2025-13135: HotelRunner Booking Widget (WordPress) is affected by Stored Cross-Site Scripting via the hotelrunner shortcode in versions

WordPress plugin HotelRunner Booking Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...

WordPress HotelRunner Booking Widget plugin <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Mohamed amine Ouamar in WordPress Plugin HotelRunner Booking Widget versions = 5.2.4...

CVE-2025-60168

Cross-Site Request Forgery CSRF vulnerability in integrationshotelrunner HotelRunner Booking Widget hotelrunner allows Stored XSS.This issue affects HotelRunner Booking Widget: from n/a through = 1.6...

EUVD-2025-35421

Cross-Site Request Forgery CSRF vulnerability in integrationshotelrunner HotelRunner Booking Widget hotelrunner allows Stored XSS.This issue affects HotelRunner Booking Widget: from n/a through = 1.6...

CVE-2025-60168

Cross-Site Request Forgery CSRF vulnerability in integrationshotelrunner HotelRunner Booking Widget hotelrunner allows Stored XSS.This issue affects HotelRunner Booking Widget: from n/a through = 1.6...

CVE-2025-60168 WordPress HotelRunner Booking Widget Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in integrationshotelrunner HotelRunner Booking Widget hotelrunner allows Stored XSS.This issue affects HotelRunner Booking Widget: from n/a through = 1.6...

CVE-2025-60168

CVE-2025-60168 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin HotelRunner Booking Widget (also referenced as integrationshotelrunner) that allows Stored XSS. Public descriptions in Red Hat and ENISA entries mirror the same flaw and note the affected widget ver...

WordPress plugin HotelRunner Booking Widget 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...