Sensitive Data Exposure in WP Hotel Booking by ThimPress
CVE-2025-63013

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
WP Hotel Booking
Vendor
CVE Published:
9 December 2025

What is CVE-2025-63013?

A vulnerability exists in WP Hotel Booking by ThimPress that allows unauthorized access to sensitive system information. This issue enables attackers to retrieve embedded sensitive data, potentially compromising user privacy and security. The affected versions range from n/a to 2.2.7, highlighting the importance of updating to secure your installations. Users of WP Hotel Booking should be aware of this vulnerability to safeguard their sensitive information.

Affected Version(s)

WP Hotel Booking <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/wp-h...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

daroo | Patchstack Bug Bounty Program
JSON
.