Known vulnerabilities in the Hydra Booking plugin
17 security advisories have been published for the Hydra Booking plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Hydra Booking - Security Vulnerability (CVE-2026-92425) MEDIUM
- Hydra Booking - Security Vulnerability (CVE-2026-92421) MEDIUM
- Hydra Booking - Security Vulnerability (CVE-2026-92420) LOW
- Hydra Booking - Cross-Site Scripting (XSS) (CVE-2026-15948) MEDIUM
- Hydra Booking - Broken Access Control (CVE-2026-28188) HIGH
- Hydra Booking - Cross-Site Scripting (XSS) (CVE-2026-57388) HIGH
- Hydra Booking - Security Vulnerability (CVE-2026-12433) MEDIUM
- Hydra Booking - Broken Access Control (CVE-2026-42675) HIGH
- Hydra Booking - Cross-Site Scripting (XSS) (CVE-2026-39541) MEDIUM
- Hydra Booking - Privilege Escalation (CVE-2025-68027) HIGH
- Hydra Booking - SQL Injection (CVE-2025-68055) HIGH
- Hydra Booking - Security Vulnerability (CVE-2025-12788) MEDIUM
- Hydra Booking - Security Vulnerability (CVE-2025-12787) MEDIUM
- Hydra Booking - SQL Injection (CVE-2025-49378) HIGH
- Hydra Booking - Broken Access Control (CVE-2025-49377) MEDIUM
- Hydra Booking - Privilege Escalation (CVE-2025-7689) HIGH
- Hydra Booking - SQL Injection (CVE-2025-49323) HIGH