Skip to content

integrationshotelrunner HotelRunner Booking Widget

CVE-2025-13135 Medium 6.4 HotelRunner Booking Widget <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
CVE-2025-60168 High 7.1 WordPress HotelRunner Booking Widget Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%