VikBooking Hotel Booking Engine & PMS

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 76% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

15 of the last 25 four- and five-star reviews came from accounts created within a month of posting the review.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ bena1066

   11mo ago

   This WP Booking Engine & PMS is an absolute game-changer for any hotel. The latest enhancements have transformed it from a great tool into an essential one. Every updates, especially in the PMS field, task management, channel synchronization, or integration of automated booking processes, have drastically streamlined our revenue strategy and made entire resource management faster and more intuitive in our organization. Equally impressive is the outstanding end-user support over the last 3 years. Their team is the gold standard, responding quickly to each request professionally, and deep expertise on complex issues like two-way OTA sync, and further. They don’t just fix problems; they provide invaluable best-practice solutions and develop software not for themselves, but for end-customers like you and me. In a nutshell: A powerful, reliable, and continuously improving Booking & PMS system backed by best-in-class support is a definite five-star investment. Thanks a lot for this amazing contribution to this community, great product & service! This topic was modified 9 months ago by bena1066. Reason: Corrections

   Read on wp.org ↗
2. ★★★★★ dm1302

   11mo ago

   The best booking plugin and integration. Thanks for support

   Read on wp.org ↗
3. ★★★★★ koiyiaras

   1.0y ago

   The plugin is one step away from 5 stars and being the best hotel booking plugin. However, it lacks one vital feature that makes it hard to choose. The feature is not available in the paid version either — the iCal sync for calendars. Without this feature, I cannot use the plugin and had to choose another one with much less quality in the interface. For hotel management, where nowadays we use many booking channels, we definitely need calendar sync. I would gladly buy this plugin if iCal sync appears and, of course, rate it 5 stars, as it has the potential to be the best WP hotel booking plugin (note: the Channels Management option is not something that I consider an alternative to iCal sync).

   Read on wp.org ↗
4. ★★★★★ julijadus

   1.0y ago

   I compared ALL the plugins and channel managers there are on the market for booking accommodation and my main criteria was functionality and price as well as the channel manager with API connection. Yes, It took me weeks and I finally chose VikBooking. I used it for 2 months now during our busiest summer season and it didn’t disappoint. The tech support is great, functionality is great and it works great, translations work great and you can translate your own thing. I’m happy with all the extras set-up, invoices, complex children pricing, coupons, cron jobs, task manager and many other things. The price is unbeatable(only one competitor comes close to it), and it pays off within a year or less compared to other competitors that have big monthly fees. The only things to improve on are (for us personally as we are not a hotel but premium cabins): design – it’s very hotel oriented, so we had to tweak the design/colours with CSS codes so it’s more applicable for us. Shortcodes – there is still no sleek shortcode for availability calendar – the one they have is again very hotel-like and unusable. Their payment gateway selection didn’t have any options for the Baltic region so we had to pay the developer to integrate it for us which cost quite a bit, but VikBooking recommended a good developer for integration so it worked out well. Overall highly recommended!

   Read on wp.org ↗
5. ★★★★★ marzomax

   1.2y ago

   <font style=”vertical-align: inherit;”><font style=”vertical-align: inherit;”>E’ un buon plugin ma non esente da lacune anche gravi. Una delle cose principali per chi fa il mio mestiere sono i pagamenti ( senza di questi non esistere neanche wordpress ei plugin associati ). Ho acquistato stripe per associarlo a vikbooking. Stripe è completo solo se ha a disposizione un metodo di pagamento dell’ospite. Purtroppo vikbooking al momento della prenotazione anche se il pagamento va a buon fine e la prenotazione è confermata non permette la memorizzazione dei dati all’interno dell’account di stripe ( anche se lo stesso plugin prevede la memorizzazione attraverso varie spunte ) e questo è grave dal mio punto di vista. Penso che il plugin sia ancora abbasta giovane e deve crescere e sono sicuro che si migliorerà sempre. Ho fatto un abbonamento per un anno e spero di rinnovare ancora</font>. Spero che venga migliorato gli aspetti che sono GLI ADDEBITI SU CARTA E LE PRE-AUTORIZZAZIONI </font> This topic was modified 1 year, 1 month ago by marzomax.

   Read on wp.org ↗
6. ★★★★★ Daniel

   1.4y ago

   The support for the plugin is very, very good! All my questions about the migration were answered promptly. The functionality is also satisfactory. In German: Die HIlfe zum Plugin ist sehr sehr gut! Alle meine Fragen zur Migration wurden umgehend beantwortet. Auch die Funktionen sind zufriedenstellend.

   Read on wp.org ↗
7. ★★★★★ kuba1235

   1.4y ago

   Vik Booking is a well-designed and powerful plugin that has helped me perfectly set up reservations for my accommodation. It offers a wide range of settings, syncs availability seamlessly, and includes many useful features that save time and simplify booking management. But what I appreciate the most is the customer support. The team is incredibly helpful, responds quickly to inquiries, and always finds a solution. I truly value their patience and professionalism. Thanks to them, everything was set up smoothly, and the system works flawlessly. I highly recommend it to anyone looking for a reliable booking system with top-notch support! ⭐⭐⭐⭐⭐

   Read on wp.org ↗
8. ★★★★★ MhrTheme

   1.7y ago

   The hotel management system was perfect for my website.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.8.14 Release date – 16 July 2026 Minor task manager improvements for OTA booking alterations. Multiple low-severity security fixes for CSRF and XSS prevention. 1.8.14
2. — Version 1.8.13 Release date – 30 June 2026 New PMS Report “Bookings”. Improvements to RMS Occupancy Pace report data collection. Outdated Channel Manager versions detection. Multiple low-severity security fixes for CSRF and XSS prevent 1.8.13
3. — Version 1.8.12 Release date – 16 June 2026 Added support to listing-level check-in instructions. Door Access Control passcodes available in front-end booking details page. Improved room-level minimum advance booking notice (empty notic 1.8.12
4. — Version 1.8.11 Release date – 03 June 2026 Fixed “arbitrary file deletion” vulnerability through Chatbot (AI or administrator reply to first message was required to use the exploit). Booking color tags improvements to support any futur 1.8.11
5. — Version 1.8.10 Release date – 05 May 2026 Quote framework minor improvements and fixes. Inquiries framework (and Chatbot) fixes. Security fixes mainly for XSS prevention or data filtering. 1.8.10
6. — Version 1.8.9 Release date – 28 April 2026 Quote framework general improvements and bug fixes. Quote lock/do-not-lock option. Automatic payment collection scheduling for VCC and CC of additional OTAs. Language translation strings upda 1.8.9

35 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter ↗
   2026-07-23 CVE-2026-15401 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.13 Patched in 1.8.14
2. Medium · 6.1 VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter ↗
   2026-07-23 CVE-2026-15346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.13 Patched in 1.8.14
3. High · 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field ↗
   2026-07-07 CVE-2026-6820 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.8 Patched in 1.8.9
4. High · 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parameter ↗
   2026-07-07 CVE-2026-6818 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.8 Patched in 1.8.9
5. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Cross-Site Request Forgery ↗
   2026-07-01 CVE-2026-57723 Cross-Site Request Forgery (CSRF) Affects <= 1.8.12 Patched in 1.8.13
6. Medium · 6.1 VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter ↗
   2026-06-30 CVE-2026-12754 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.12 Patched in 1.8.13
7. High · 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.9 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-06-01 CVE-2026-42762 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.9 Patched in 1.8.10
8. Critical · 9.1 VikBooking Hotel Booking Engine & PMS <= 1.8.10 - Unauthenticated Arbitrary File Deletion ↗
   2026-05-27 CVE-2026-42737 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 1.8.10 Patched in 1.8.11
9. High · 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-05-20 CVE-2026-42683 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.8 Patched in 1.8.9
10. High · 7.5 VikBooking Hotel Booking Engine & PMS <= 1.8.2 - Unauthenticated Information Exposure ↗
    2025-11-07 CVE-2025-49918 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.8.2 Patched in 1.8.3
11. Medium · 5.3 VikBooking Hotel Booking Engine & PMS <= 1.8.2 - Missing Authorization ↗
    2025-10-21 CVE-2025-5803 Missing Authorization Affects <= 1.8.2 Patched in 1.8.3
12. Medium · 4.4 VikBooking Hotel Booking Engine & PMS <= 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-03-03 CVE-2024-13616 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1 Patched in 1.7.2
13. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Settings Update ↗
    2025-02-03 CVE-2025-22670 Cross-Site Request Forgery (CSRF) Affects <= 1.7.2 Patched in 1.7.3
14. High · 8.8 VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload ↗
    2025-01-25 CVE-2024-11641 Cross-Site Request Forgery (CSRF) Affects <= 1.7.2 Patched in 1.7.3
15. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.6.7 - Insecure Direct Object Reference to Menu Access ↗
    2024-04-19 CVE-2024-2441 Authorization Bypass Through User-Controlled Key Affects <= 1.6.7 Patched in 1.6.8
16. Medium · 5.4 VikBooking Hotel Booking Engine & PMS <= 1.6.7 - Missing Authorization ↗
    2024-04-19 CVE-2024-2749 Missing Authorization Affects <= 1.6.7 Patched in 1.6.8
17. Medium · 6.1 VikBooking Hotel Booking Engine & PMS <= 1.6.7 - Reflected Cross-Site Scripting ↗
    2024-04-16 CVE-2024-32563 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.7 Patched in 1.6.8
18. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in admin_widgets_welcome function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
19. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.6.1 - Cross-Site Request Forgery in multiple functions in admin/controller.php ↗
    2023-02-15 CVE-2023-32501 Cross-Site Request Forgery (CSRF) Affects <= 1.6.1 Patched in 1.6.2
20. Medium · 5.4 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in saveconfig function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
21. Medium · 5.4 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in savetmplfile function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
22. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in exec_multitask_widgets function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
23. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.6.1 - Cross-Site Request Forgery in listenTosFieldSavingTask function ↗
    2023-02-15 CVE-2023-32501 Cross-Site Request Forgery (CSRF) Affects <= 1.6.1 Patched in 1.6.2
24. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in widgets_watch_data function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
25. Medium · 4.3 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in exec_admin_widget function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
26. Medium · 5.4 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in savetranslation function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
27. Medium · 5.4 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in savetranslationstay function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
28. Medium · 5.3 VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in save_admin_widgets function ↗
    2023-02-15 CVE-2023-25707 Cross-Site Request Forgery (CSRF) Affects <= 1.5.12 Patched in 1.6.0
29. Medium · 4.4 VikBooking Hotel Booking Engine & PMS <= 1.5.11 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-01-27 CVE-2023-24396 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.5.12 Patched in 1.5.12
30. Medium · 6.1 VikBooking <= 1.5.8 - Reflected Cross-Site Scripting ↗
    2022-05-03 CVE-2022-1528 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.5.9 Patched in 1.5.9
31. High · 8.8 VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting ↗
    2022-04-21 CVE-2022-1407 Cross-Site Request Forgery (CSRF) Affects < 1.5.8 Patched in 1.5.8
32. Medium · 5.5 VikBooking Hotel Booking Engine & PMS <= 1.5.8 - Arbitrary File Upload ↗
    2022-04-21 CVE-2022-1409 Unrestricted Upload of File with Dangerous Type Affects < 1.5.8 Patched in 1.5.9
33. Medium · 5.5 VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Admin+ Stored Cross-Site Scripting ↗
    2022-04-21 CVE-2022-1408 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.5.8 Patched in 1.5.8
34. Critical · 9.8 VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Arbitrary File Upload ↗
    2022-04-18 CVE-2022-27862 Unrestricted Upload of File with Dangerous Type Affects <= 1.5.3 Patched in 1.5.4
35. Medium · 5.3 VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Sensitive Information Exposure ↗
    2022-04-18 CVE-2022-27863 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.5.3 Patched in 1.5.4

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 15 languages, 5 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-16 9K+ → 8K+ down after 426 days in tier
2. 2025-02-14 8K+ → 9K+ up after 347 days in tier
3. 2024-03-04 7K+ → 8K+ up after 209 days in tier
4. 2023-08-08 6K+ → 7K+ up after 165 days in tier
5. 2023-02-24 5K+ → 6K+ up after 128 days in tier
6. 2022-10-19 4K+ → 5K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• 1Day Booking Engine 10+ installs · 3.6★ · 4 shared tags D
• MotoPress Hotel Booking 10K+ installs · 3.7★ · 3 shared tags B
• AweBooking – Hotel Booking System 1K+ installs · 3.3★ · 3 shared tags F
• WP Hotel Booking WPML Support 400+ installs · 3.6★ · 3 shared tags B
• WP Hotel Booking Authorize Payment 300+ installs · 3.6★ · 3 shared tags B
• AweBooking & Elementor Integration 100+ installs · 3.6★ · 3 shared tags D

Embed this report card

Drop a live Pulse card for VikBooking Hotel Booking Engine & PMS into a readme, a review or a deck. It updates itself.

VikBooking Hotel Booking Engine & PMS: 8K+ active installs, 4.8★ (60 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/vikbooking