Motopress
7 CVEs across 10 Motopress products. Browse Motopress vulnerabilities, severities, and proof-of-concept exploits.
Motopress products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-50948 | Medium | 6.4 | 2026-05-10 | Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by subm… |
CVE-2024-13642 | Medium | 6.4 | 2025-01-30 | The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hotspot widget in all versions up to… |
CVE-2024-10872 | Medium | 6.4 | 2024-11-20 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template-post-custom-field` block in all versions up t… |
CVE-2020-36840 | High | 7.3 | 2024-10-16 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_route… |
CVE-2024-39630 | Medium | 5.5 | 2024-08-01 | Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedu… |
CVE-2024-6491 | Medium | 4.3 | 2024-07-20 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mailchimp_api_ke… |
CVE-2024-6489 | Medium | 5.3 | 2024-07-20 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_google_api_k… |
CVE-2024-3588 | Medium | 6.4 | 2024-05-02 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block in all versions up to, and inc… |
CVE-2024-1948 | Medium | 6.4 | 2024-04-09 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block content in all versions up to, and including, 2.0… |
CVE-2024-29914 | Medium | 6.5 | 2024-03-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MotoPress Stratum allows Stored XSS.This issue affects St… |
CVE-2023-6963 | Medium | 5.3 | 2024-02-05 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it possible for unauthen… |
CVE-2023-6959 | Medium | 4.3 | 2024-02-05 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the recaptcha_api_ke… |
CVE-2023-6042 | High | 7.5 | 2024-01-08 | Any unauthenticated user may send e-mail from the site with any title or content to the admin |
CVE-2023-5991 | Critical | 9.8 | 2023-12-26 | The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisati… |
CVE-2023-48756 | High | 7.1 | 2023-12-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor allows Reflected XSS.T… |
CVE-2023-28498 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions. |
CVE-2023-1910 | Medium | 4.3 | 2023-06-09 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the get_remote… |
CVE-2023-1895 | High | 8.5 | 2023-06-09 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Server Side Request Forgery via the get_remote_content REST API endpoint in versions up to… |
CVE-2022-2844 | Low | 3.5 | 2022-08-16 | A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This affects an unknown part of the file /wp/?… |
CVE-2022-2843 | Low | 3.5 | 2022-08-16 | A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this issue is some unknown functionality of… |
CVE-2021-24722 | Medium | 4.8 | 2021-11-01 | The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high… |
CVE-2021-24544 | Medium | 5.4 | 2021-10-25 | The Responsive WordPress Slider WordPress plugin through 2.2.0 does not sanitise and escape some of the Slider options, allowing Cross-Site Scripting payloads… |
CVE-2021-24585 | Medium | 6.5 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the… |
CVE-2021-24584 | Medium | 5.4 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_po… |
CVE-2021-24583 | Medium | 4.3 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the edit_po… |
CVE-2021-24724 | Medium | 5.4 | 2021-09-13 | The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users su… |