Skip to content
PluginCanary

Hydra Booking

Hydra Booking - Appointment Scheduling & Booking Calendar
by Themefic · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 14 Oct 2026, 87 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Hydra Booking
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is Hydra Booking still maintained?
Yes. Last release 14 Oct 2026, 87 releases in the last 24 months. 14 Oct 2026 · wordpress.org
Who owns Hydra Booking, and has it changed hands?
No change recorded. Main committer themefic since Nov 2024. 3 Nov 2026 · SVN log
Was Hydra Booking removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Hydra Booking safe?
17 known vulnerabilities, all fixed (latest in 1.2.3). Not on the exploited list. 17 Sep 2026 · Wordfence Intelligence
Is the latest Hydra Booking update safe to install?
No ownership change before 1.2.8. No one-star spike after it. 14 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master18 Mar 2024 to 18 Mar 2024, 1 commits
themefic11 Nov 2024 to 4 Nov 2026, 103 commits
mdashikul24 Mar 2025 to 16 Sep 2026, 23 commits
kamrul042419 Aug 2026 to 19 Aug 2026, 3 commits

New committer kamrul0424 made a first commit on 19 Aug 2026.

Maintenance

Last release
21 days ago
Releases, 24 months
87
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Hydra Booking
Q1 20240
Q2 20240
Q3 20240
Q4 202413
Q1 202521
Q2 202514
Q3 20258
Q4 20259
Q1 20268
Q2 20267
Q3 20265
Q4 20262

Last release 14 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Rating distribution
5 star7
4 star1
3 star0
2 star0
1 star1

Security record

17 vulnerabilities in 24 months, all patched (latest fixed in 1.2.3).

Show 17 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Sep 2026Hydra Booking <= 1.2.2 - Authenticated (Hydra Host+) Insecure Direct Object Reference4.3<= 1.2.21.2.3Patched before disclosure
17 Sep 2026Hydra Booking <= 1.2.1 - Authenticated (Hydra Host+) Insecure Direct Object Reference4.3<= 1.2.11.2.2Patched before disclosure
17 Sep 2026Hydra Booking <= 1.2.3 - Authenticated (Hydra Host+) Insecure Direct Object Reference4.3<= 1.2.31.2.4Patched before disclosure
14 Aug 2026Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' Parameter6.4<= 1.2.21.2.3Patched before disclosure
13 Aug 2026Hydra Booking <= 1.2.2 - Missing Authorization5.3<= 1.2.21.2.3Patched before disclosure
8 Jul 2026Hydra Booking <= 1.2.1 - Authenticated (Custom+) Insecure Direct Object Reference to Sensitive Information Exposure via 'booking_id' Parameter4.3<= 1.2.11.2.2Patched before disclosure
8 Jul 2026Hydra Booking - Appointment Scheduling & Booking Calendar <= 1.1.44 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.1.441.1.45Patched before disclosure
15 May 2026Hydra Booking - Appointment Scheduling & Booking Calendar <= 1.1.41 - Missing Authorization5.3<= 1.1.411.1.42Patched before disclosure
15 Feb 2026Hydra Booking <= 1.1.38 - Authenticated (Hydra host+) Stored Cross-Site Scripting6.4<= 1.1.381.1.3913
21 Jan 2026Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation9.8<= 1.1.321.1.33Patched before disclosure
27 Nov 2025Hydra Booking <= 1.1.32 - Authenticated (Custom role+) SQL Injection6.5<= 1.1.321.1.3340
10 Nov 2025Hydra Booking - All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypass5.3<= 1.1.271.1.28Patched before disclosure
10 Nov 2025Hydra Booking - All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation5.3<= 1.1.271.1.28Patched before disclosure
28 Jul 2025Hydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb_reset_password_callback Function8.81.1.0 to 1.1.181.1.19Patched before disclosure
12 Jun 2025Hydra Booking <= 1.1.9 - Missing Authorization4.3<= 1.1.91.1.10Patched before disclosure
12 Jun 2025Hydra Booking <= 1.1.10 - Authenticated (Subscriber+) SQL Injection6.5<= 1.1.101.1.11Patched before disclosure
5 Jun 2025Hydra Booking <= 1.1.10 - Authenticated (Contributor+) SQL Injection6.5<= 1.1.101.1.11Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

33% of 3 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Hydra Booking
4 May 2026164
11 May 2026603
18 May 20261,334
25 May 20261,141
1 Jun 2026303
8 Jun 20261,084
15 Jun 2026288
22 Jun 20261,063
29 Jun 20261,032
6 Jul 20261,512
13 Jul 2026430
20 Jul 2026268
27 Jul 2026259
3 Aug 20261,180
10 Aug 2026664
17 Aug 20261,310
24 Aug 2026292
31 Aug 20261,111
7 Sep 2026293
14 Sep 20261,175
21 Sep 2026739
28 Sep 2026383
5 Oct 2026370
12 Oct 20262,015
19 Oct 2026574
26 Oct 2026619
2 Nov 202668

Weekly downloads over the last 4 weeks are 9% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SimplyBook.meScore 91 · 30,000+MotoPress Hotel Booking StylesScore 91 · 10,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+EMCScore 89 · 10,000+WP Simple Booking CalendarScore 86 · 10,000+

Facts

Version1.2.8
AuthorThemefic
Added11 Nov 2024
Last updated14 Oct 2026
Active installs2,000+
Requires WordPress6.8
Tested up to7.1.4
Requires PHP7.4
CategoryBookings & Scheduling > Appointment Scheduling
Tagsbooking, calendar, scheduling, appointments, appointment booking

Other plugins by this author: Ultra Addons for Contact Form 7, Ultimate Before After Image Slider & Gallery - BEAF, Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental, Tourfic Toolkit, Instantio - Side Cart & One-Page Checkout for WooCommerce, Ultra Addons for WPForms

Questions

Is Hydra Booking still maintained?

Yes. Last release 14 Oct 2026, 87 releases in the last 24 months.

Who owns Hydra Booking, and has it changed hands?

No change recorded. Main committer themefic since Nov 2024.

Was Hydra Booking removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Hydra Booking safe?

17 known vulnerabilities, all fixed (latest in 1.2.3). Not on the exploited list.

Is the latest Hydra Booking update safe to install?

No ownership change before 1.2.8. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue