Hotel Booking Lite vulnerabilities

2 known vulnerabilities in Hotel Booking Lite from Jetmonsters. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Hotel Booking Lite: Improper Control of Generation of Code

  CVE-2025-66078Dec 18, 2025Jetmonsters

  Improper Control of Generation of Code ('Code Injection') vulnerability in jetmonsters Hotel Booking Lite motopress-hotel-booking-lite allows Remote Code Inclusion.This issue affects Hotel Booking Lite: from n/a through <= 5.2.3.

• 9.8 Critical severity

  MotoPress Hotel Booking: Deserialization of Untrusted Data

  CVE-2024-4413May 14, 2024Jetmonsters

  The Hotel Booking Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.11.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP cha