medium5.3
CVE-2026-15149
The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a booking, …
Impact
The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that room quantities and the resulting order total are non-negative when placing a booking, and relies on client-controlled cart data, allowing unauthenticated users to create confirmed reservations for free or at an arbitrarily reduced price.
Affected products
| Product | Affected versions |
|---|---|
| WP Hotel Booking WordPress Plugin | before 2.3.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.