Jetmonsters Motopress Hotel Booking vulnerabilities
- jetmonsters motopress hotel bookingMotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'7.2 High
- jetmonsters motopress hotel bookingHotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR5.4 Medium
- jetmonsters motopress hotel bookingHotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint5.3 Medium
- jetmonsters motopress hotel bookingHotel Booking Lite < 6.0.4 - Subscriber+ Sensitive Data Disclosure via Admin Calendar AJAX Action4.3 Medium
- jetmonsters motopress hotel bookingMotoPress Hotel Booking <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via mphb_update_booking_notes AJAX Action5.3 Medium
- jetmonsters hotel booking lite, motopress hotel booking +1 moreHotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injection9.8 Critical