MO
Vendor
Motopress
26
CVEs
0
On KEV
0
New 30D
Products
GE9.6
Getwid
Motopress
10 CVEs0 on KEV0 new
TA9.8
Timetable and Event Schedule
MotoPress
8 CVEs0 on KEV0 new
HB9.8
Hotel Booking Lite
MotoPress
2 CVEs0 on KEV0 new
ST6.5
Stratum
MotoPress
2 CVEs0 on KEV0 new
JF6.1
Jetblocks For Elementor
Motopress
1 CVEs0 on KEV0 new
MH6.4
Motopress Hotel Booking Lite
Motopress
1 CVEs0 on KEV0 new
MO5.4
Motopress-slider-lite
Motopress
1 CVEs0 on KEV0 new
RM4.8
Restaurant Menu
Motopress
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-50948 | MH Motopress Hotel Booking Lite Motopress | 6.4 | May 10 | Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting |
| CVE-2024-13642 | ST Stratum Motopress | 5.4 | Jan 30 | Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget |
| CVE-2024-10872 | GE Getwid Motopress | 5.4 | Nov 20 | Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2020-36840 | TA Timetable And Event Schedule Motopress | 9.8 | Oct 16 | Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorization |
| CVE-2024-39630 | TA Timetable and Event Schedule MotoPress | 5.5 | Aug 1 | WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability |
| CVE-2024-6489 | GE Getwid Motopress | 5.3 | Jul 20 | Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update |
| CVE-2024-6491 | GE Getwid Motopress | 4.3 | Jul 20 | Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update |
| CVE-2024-3588 | GE Getwid Motopress | 5.4 | May 2 | Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown' |
| CVE-2024-1948 | GE Getwid Motopress | 5.4 | Apr 9 | Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content |
| CVE-2024-29914 | ST Stratum MotoPress | 6.5 | Mar 27 | WordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-6963 | GE Getwid Motopress | 5.3 | Feb 5 | Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass |
| CVE-2023-6959 | GE Getwid Motopress | 4.3 | Feb 5 | Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification |
| CVE-2023-6042 | GE Getwid Motopress | 7.5 | Jan 8 | Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin |
| CVE-2023-5991 | HB Hotel Booking Lite Motopress | 9.8 | Dec 26 | Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion |
| CVE-2023-48756 | JF Jetblocks For Elementor Motopress | 6.1 | Dec 14 | WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-28498 | HB Hotel Booking Lite MotoPress | 8.8 | Nov 12 | WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-1895 | GE Getwid Motopress | 9.6 | Jun 9 | Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery |
| CVE-2023-1910 | GE Getwid Motopress | 4.3 | Jun 9 | Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint |
| CVE-2022-2844 | TA Timetable And Event Schedule Motopress | 6.1 | Aug 16 | A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06 |
| CVE-2022-2843 | TA Timetable And Event Schedule Motopress | 6.1 | Aug 16 | A vulnerability was found in MotoPress Timetable and Event Schedule |
| CVE-2021-24722 | RM Restaurant Menu Motopress | 4.8 | Nov 1 | The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to… |
| CVE-2021-24544 | MO Motopress-slider-lite Motopress | 5.4 | Oct 25 | The Responsive WordPress Slider WordPress plugin through 2.2.0 does not sanitise and escape some of the Slider options, allowing Cross-Site Scripting payloads to be set in them |
| CVE-2021-24585 | TA Timetable And Event Schedule Motopress | 6.5 | Sep 20 | The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the user related to the… |
| CVE-2021-24584 | TA Timetable And Event Schedule Motopress | 5.4 | Sep 20 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_posts capability… |
| CVE-2021-24583 | TA Timetable And Event Schedule Motopress | 4.3 | Sep 20 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the edit_posts capability… |
| CVE-2021-24724 | TA Timetable And Event Schedule Motopress | 5.4 | Sep 13 | The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to… |