CVE-2026-15238

The MotoPress Hotel Booking (referred to in some records as Hotel Booking Lite ) WordPress plugin versions prior to 6.2.3 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. The flaw exists because the plugin fails to verify record ownership during the update process for c...