Medium · 5.5 CVE-2024-39630 EUVD-2024-38136GHSA-xhpv-xmqr-mf62

WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability

Published Aug 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: MotoPress Product: Timetable and Event Schedule

Description

Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedule: from n/a through 2.4.13.

Affected products

Vendor	Product	Affected	Fixed
MotoPress	Timetable and Event Schedule	≤ 2.4.13	—

References

https://patchstack.com/database/vulnerability/mp-timetable/wordpress-timetable-and-event-schedule-by-motopress-plugin-2-4-13-php-object-injection-vulnerability?_s_id=cve vdb-entry