Motopress Hotel Booking (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-10. Vendor: Unknown.

CVEs of Motopress Hotel Booking

• CVE-2026-15238 - CVSS 5.4 (medium), 2026-08-10: The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user…
• CVE-2026-15237 - CVSS 5.3 (medium), 2026-08-10: The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a REST endpoint that creates payment…
• CVE-2026-15235 - CVSS 4.3 (medium), 2026-07-30: The MotoPress Hotel Booking WordPress plugin before 6.0.4 does not perform a capability check before returning a booking's full customer details in one of its…