WordPress plugin
JS Multi Hotel security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium4
- Low0
All JS Multi Hotel vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Full Path Disclosure ≤2.2.1No patch available | CVE-2014-100009 | |
| Medium6.1 | Cross-Site Scripting ≤2.2.1No patch available | CVE-2014-100008 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.2.1No patch available | — | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.2.1No patch available | CVE-2013-7419 |
- Medium5.3Full Path Disclosure
≤2.2.1No patch available
- Medium6.1Cross-Site Scripting
≤2.2.1No patch available
- Medium6.1Reflected Cross-Site Scripting
≤2.2.1No patch available
- Medium6.1Reflected Cross-Site Scripting
≤2.2.1No patch available
JS Multi Hotel: common questions
Does JS Multi Hotel have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in JS Multi Hotel: 4 medium. At least one is not fixed in the latest version.
How do I check which version of JS Multi Hotel I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent JS Multi Hotel vulnerability?
CVE-2014-100009, published Mar 31, 2014: JS Multi Hotel <= 2.2.1 - Full Path Disclosure. Severity: Medium (CVSS 5.3).
Is any JS Multi Hotel vulnerability listed in CISA KEV?
No. None of the known JS Multi Hotel vulnerabilities is currently listed in the CISA KEV catalog.