Vulnerability in Motopress Hotel Booking

CVE-2026-15238

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account (Subscriber and above) to modify or overwrite the pe…

Affected products

  • Unknown Motopress Hotel Booking — versions 0

References