CVE-2025-12954

The Timetable and Event Schedule by MotoPress WordPress plugin, in versions prior to 2.4.16 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The application fails to perform adequate access validation when duplicating specific events, allowing users with roles as low as Contributor...