Skip to content
OpenAdvisories

Vendor

MotoPress

6 known vulnerabilities.

Products

Timetable and Event Schedule 3 Motopress Hotel Booking Lite 1 Hotel Booking Lite 1 Stratum 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2022-50948

    Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting

    Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in accommodation type fields. Attackers can inject script tags through the title and…

    MotoPress Motopress Hotel Booking Lite
  • Medium 5.5
    CVE-2024-39630

    WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedule: from n/a through 2.4.13.

    MotoPress Timetable and Event Schedule
  • Medium 6.5
    CVE-2024-29914

    WordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MotoPress Stratum allows Stored XSS.This issue affects Stratum: from n/a through 1.3.15.

    MotoPress Stratum
  • Medium 4.3
    CVE-2023-28498

    WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions.

    MotoPress Hotel Booking Lite