CVE-2026-15153 | WP Hotel Booking Plugin up to 2.3.1 on WordPress Search sql injection

A vulnerability was found in WP Hotel Booking Plugin up to 2.3.1 on WordPress. It has been classified as problematic. The affected element is an unknown function. The manipulation of the argument Search leads to sql injection.

This vulnerability is traded as CVE-2026-15153. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More