CVE-2026-125851

Hotel Booking Lite arbitrary file upload in theme file handler

critical · 9.9

Hotel Booking Lite

Published Nov 13, 2026, 15:08 UTC

Description

Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Hotel Booking Lite hotel-booking-lite allows Upload a Web Shell to a Web Server.This issue affects Hotel Booking Lite: from n/a through 2.5.1.

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.