Motopress Timetable_and_event_schedule
7 CVEs affecting Motopress Timetable_and_event_schedule. Latest disclosed: 2024-10-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36840 | High | 7.3 | 2024-10-16 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_route… |
CVE-2021-24585 | Medium | 6.5 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the… |
CVE-2021-24584 | Medium | 5.4 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_po… |
CVE-2021-24724 | Medium | 5.4 | 2021-09-13 | The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users su… |
CVE-2021-24583 | Medium | 4.3 | 2021-09-20 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the edit_po… |
CVE-2022-2844 | Low | 3.5 | 2022-08-16 | A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This affects an unknown part of the file /wp/?… |
CVE-2022-2843 | Low | 3.5 | 2022-08-16 | A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this issue is some unknown functionality of… |