Pricing
Case studies
Login
Start trial
Hydra Booking
Themefic
Developer
1.1.40
Latest version
2,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
8 patched
4 Mitigation rules
Privilege Escalation vulnerability
<= 1.1.32
21/01/2026
SQL Injection vulnerability
<= 1.1.32
27/11/2025
Missing Payment Verification to Unauthenticated Payment Bypass vulnerability
<= 1.1.27
11/11/2025
Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation vulnerability
<= 1.1.27
11/11/2025
Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
1.1.0-1.1.18
28/07/2025
Broken Access Control vulnerability
<= 1.1.9
12/06/2025
SQL Injection vulnerability
<= 1.1.10
12/06/2025
SQL Injection Vulnerability
<= 1.1.10
05/06/2025