2 matches found
CVE-2025-12954
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor...
2.7CVSS0.00206EPSS
SaveExploits0References1
CVE-2025-12954: Authorization Bypass Through User-Controlled Key
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor...
2.7CVSS5.9AI score0.00206EPSS
SaveExploits0References1
20