CVE-2026-15153

The WP Hotel Booking WordPress plugin, prior to version 2.3.2, is vulnerable to SQL injection in an administrative listing due to unsanitised/unescaped search parameters used in a SQL query. The root cause is inadequate input sanitisation for the search field accessed by users with booking-manage...