Sensitive Data Exposure in Hotel Booking Lite by MotoPress
CVE-2026-57347

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Hotel Booking Lite
Vendor
CVE Published:
2 July 2026

What is CVE-2026-57347?

A vulnerability in versions of Hotel Booking Lite up to 6.0.3 allows unauthorized access to subscriber-sensitive data, posing a serious risk to user privacy. This issue can lead to exposure of personal and financial details, compromising the integrity of the booking system. Website owners must assess their installations and apply necessary updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Hotel Booking Lite <= 6.0.3

References

https://patchstack.com/database/wordpress/plugin/motopres...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sakimi | Patchstack Bug Bounty Program
.