Hydra Booking — Appointment Scheduling & Booking Calendar

75 Quality Score

Active Installs

15/30

The popularity score is inflated relative to a modest install base of 2,000 active sites, signalling a niche plugin that is not yet widely adopted.

Update Freshness

25/25

Maintenance is perfect: the plugin was updated on 2026-07-08, indicating the developer is actively shipping changes and fixes.

User Rating

13/15

With an 88 out of 100 from 8 ratings, the user sentiment is strong but the sample size is too small to draw firm conclusions.

Support Health

8/15

Support health sits at 50 with only 2 threads recorded and both resolved, so the track record is good but there is barely any volume to judge responsiveness.

WP Compatibility

15/15

Compatibility is flawless, with tested support up to WordPress 7.0.1 and PHP 7.4 as the minimum requirement.

Scores higher than 43% of indexed plugins

About

A complete appointment scheduling and booking calendar for WordPress — integrates with WooCommerce, Google Calendar, Zoom, and more.

Active Installs 2k+

Rating ★★★★ 4.4/5

Last Updated 2026-09-16 6:28am GMT

Requires WordPress 6.8+

Tested Up To 7.1.1

Requires PHP 7.4+

Security History

17 known vulnerabilities, all patched

1 Critical 2 High 14 Medium

Most recent: September 17, 2026

View details ▸

Hydra Booking <= 1.2.3 - Authenticated (Hydra Host+) Insecure Direct Object Reference Medium

September 17, 2026 Patched in ["1.2.4"] CVE-2026-92425

Hydra Booking <= 1.2.1 - Authenticated (Hydra Host+) Insecure Direct Object Reference Medium

September 17, 2026 Patched in ["1.2.2"] CVE-2026-92420

Hydra Booking <= 1.2.2 - Authenticated (Hydra Host+) Insecure Direct Object Reference Medium

September 17, 2026 Patched in ["1.2.3"] CVE-2026-92421

Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' Parameter Medium

August 14, 2026 Patched in ["1.2.3"] CVE-2026-15948

Hydra Booking <= 1.2.2 - Missing Authorization Medium

August 13, 2026 Patched in ["1.2.3"] CVE-2026-28188

Hydra Booking <= 1.2.1 - Authenticated (Custom+) Insecure Direct Object Reference to Sensitive Information Exposure via 'booking_id' Parameter Medium

July 8, 2026 Patched in ["1.2.2"] CVE-2026-12433

Hydra Booking — Appointment Scheduling & Booking Calendar <= 1.1.44 - Unauthenticated Stored Cross-Site Scripting High

July 8, 2026 Patched in ["1.1.45"] CVE-2026-57388

Hydra Booking — Appointment Scheduling & Booking Calendar <= 1.1.41 - Missing Authorization Medium

May 15, 2026 Patched in ["1.1.42"] CVE-2026-42675

Hydra Booking <= 1.1.38 - Authenticated (Hydra host+) Stored Cross-Site Scripting Medium

February 15, 2026 Patched in ["1.1.39"] CVE-2026-39541

Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation Critical

January 21, 2026 Patched in ["1.1.33"] CVE-2025-68027

Hydra Booking <= 1.1.32 - Authenticated (Custom role+) SQL Injection Medium

November 27, 2025 Patched in ["1.1.33"] CVE-2025-68055

Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypass Medium

November 10, 2025 Patched in ["1.1.28"] CVE-2025-12788

Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation Medium

November 10, 2025 Patched in ["1.1.28"] CVE-2025-12787

Hydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb_reset_password_callback Function High

July 28, 2025 Patched in ["1.1.19"] CVE-2025-7689

Hydra Booking <= 1.1.10 - Authenticated (Subscriber+) SQL Injection Medium

June 12, 2025 Patched in ["1.1.11"] CVE-2025-49378

Hydra Booking <= 1.1.9 - Missing Authorization Medium

June 12, 2025 Patched in ["1.1.10"] CVE-2025-49377

Hydra Booking <= 1.1.10 - Authenticated (Contributor+) SQL Injection Medium

June 5, 2025 Patched in ["1.1.11"] CVE-2025-49323

What It Does

Hydra Booking is an appointment scheduling plugin that lets visitors book time slots through a calendar interface on your WordPress site. It integrates with WooCommerce for payments, Google Calendar for two-way sync of availability, and Zoom to automatically generate meeting links for booked appointments. It is positioned as an all-in-one booking system without needing separate plugins for each integration.

Who It's For

This plugin suits small service-based businesses such as consultants, coaches, tutors, or clinics that need a straightforward booking flow with calendar sync and Zoom meetings. It is best for site owners who want a single plugin to handle scheduling, payments, and video meetings rather than stitching multiple tools together. If you already run WooCommerce and want bookings tied directly to product orders, this is a natural fit.

Who Should Skip It

If you run a high-volume booking operation, need advanced features like group bookings, recurring appointments, or staff resource management, you will be better served by a more mature plugin such as Amelia or LatePoint. Sites on PHP versions older than 7.4 or WordPress below 5.4 cannot run it at all.

The Bottom Line

Hydra Booking covers the core appointment scheduling workflow at an overall score of 75.48, with strong maintenance and compatibility but thin evidence on support and user experience at scale. It is a reasonable choice for small WooCommerce-driven sites that want bundled Zoom and Google Calendar support. For larger operations or anyone who values a proven track record, a higher-install alternative like Amelia or LatePoint is the safer bet.

Related Plugins

The Events Calendar 90/100

Pick this when you are running ticketed events, recurring meetups, or community calendars rather than one-to-one service appointments.

LatePoint 85/100

Choose LatePoint when you need a polished, mobile-friendly booking dashboard with staff management and proven scalability to 100,000 installs.

Simply Schedule Appointments 84/100

Go with Simply Schedule Appointments if you want a lightweight scheduler focused on one-to-one bookings with minimal configuration.

Amelia 83/100

Pick Amelia for service businesses that need advanced features like multiple staff, resources, package bookings, and automated notifications.

Booking Calendar 83/100

Choose the original Booking Calendar plugin when you want maximum longevity and a simple date-range rental or reservation system.