Log in Start free

integrationshotelrunner

Products

ProductCVEsExploitedLatest
HotelRunner Booking Widget2–Nov 21, 2025

Exploited and recent CVEs

  • CVE-2025-13135 Medium 6.4 HotelRunner Booking Widget <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-60168 High 7.1 WordPress HotelRunner Booking Widget Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%