Vulnerabilities in integrationshotelrunner

2 results
CVE-2025-13135MEDIUMHotelRunner Booking Widget <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-60168HIGHWordPress HotelRunner Booking Widget Plugin <= 1.6 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%