CVE-2026-15153

The WP Hotel Booking WordPress plugin, in versions prior to 2.3.2 , is vulnerable to SQL injection due to improper sanitization and escaping of a search parameter on an administrative listing. This flaw allows users with booking-management roles to execute arbitrary SQL queries. While the vulnera...