CVE-2024-39630

Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedule: from n/a through 2.4.13...

CVE-2024-39630

CVE-2024-39630 describes a Deserialization of Untrusted Data vulnerability in the MotoPress Timetable and Event Schedule plugin for WordPress (Timetable and Event Schedule, affected versions 2.4.13 and earlier). The root cause is PHP object injection via untrusted data deserialization. Red Hat an...

PT-2024-28567 · Motopress · Motopress Timetable/Event Schedule

Name of the Vulnerable Software and Affected Versions: MotoPress Timetable and Event Schedule versions 2.4.13 and earlier Description: The issue is related to the deserialization of untrusted data, allowing object injection. Recommendations: For versions 2.4.13 and earlier, update to a version...

WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by VNPT Nguyễn Phương Bắc Patchstack Alliance in WordPress Plugin Timetable and Event Schedule versions = 2.4.13...

CVE-2024-3342

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attribute of the 'mp-timetable' shortcode in all versions up to, and including, 2.4.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

CVE-2024-3342

CVE-2024-3342 affects the Timetable and Event Schedule by MotoPress WordPress plugin. The vulnerability is an SQL Injection through the mp-timetable shortcode’s events parameter in all versions up to 2.4.11, caused by insufficient escaping and improper SQL query handling. Exploitation requires au...

CVE-2024-3342 Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attribute of the 'mp-timetable' shortcode in all versions up to, and including, 2.4.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

CVE-2024-3342 Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection

The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attribute of the 'mp-timetable' shortcode in all versions up to, and including, 2.4.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

WordPress plugin Timetable and Event Schedule by MotoPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2024-25245

Name of the Vulnerable Software and Affected Versions The Timetable and Event Schedule by MotoPress plugin for WordPress versions up to, and including, 2.4.11 Description The issue arises from insufficient escaping on the user-supplied events attribute of the mp-timetable shortcode and lack of...

CVE-2024-29914

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MotoPress Stratum allows Stored XSS.This issue affects Stratum: from n/a through 1.3.15...

CVE-2024-29914

Technical details about CVE-2024-29914 are not provided in the supplied documents. The initial entry notes a Stored XSS in MotoPress Stratum (WordPress plugin) up to version 1.3.15, but no fix/impact specifics are included here.

CVE-2023-28498

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

CVE-2023-28498

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

CVE-2023-28498

CVE-2023-28498 is a Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin for WordPress, affecting versions

CVE-2023-28498 WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in MotoPress Hotel Booking Lite plugin = 4.6.0 versions...

WordPress Motopress Hotel Booking Lite 4.4.2 Cross Site Scripting

Exploit Title: WordPress Plugin Motopress Hotel Booking Lite 4.4.2 - Stored Cross-Site Scripting XSS Date: 2022-09-28 Exploit Author: Ali Alipour Vendor Homepage: https://motopress.com/ Software Link: https://wordpress.org/plugins/motopress-hotel-booking-lite/ Version: 4.4.2 Tested on: Windows 10...

CVE-2022-2843

A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /wp-admin/admin-ajax.php of the component Quick Edit. The manipulation of the argument posttitle with the input leads to cross si...

CVE-2022-2844

A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This affects an unknown part of the file /wp/?cpmvcid=1&cpmvcdoaction=mvparse&f=datafeed&calid=1&monthindex=1&method=adddetails&id=2 of the component Calendar Handler. The manipulation...