Motopress vulnerabilities

Products

• Getwid 10
• Timetable And Event Schedule 7
• Timetable And Event Schedule 3
• Hotel Booking Lite 2
• Stratum 2

Newest

• motopress hotel booking lite Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting CVE-2022-50948 5.1 MediumMay 10, 2026
• motopress stratum, jetmonsters stratum widgets for elementor +1 more Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget CVE-2024-13642 6.4 MediumJanuary 30, 2025
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-10872 6.4 MediumNovember 20, 2024
• jetmonsters timetable and event schedule by motopress, motopress timetable and event schedule +1 more Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorization CVE-2020-36840 7.3 HighOctober 16, 2024
• motopress timetable and event schedule WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability CVE-2024-39630 5.5 MediumAugust 1, 2024
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update CVE-2024-6489 5.3 MediumJuly 20, 2024
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update CVE-2024-6491 4.3 MediumJuly 20, 2024
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown' CVE-2024-3588 6.4 MediumMay 2, 2024
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content CVE-2024-1948 6.4 MediumApril 9, 2024
• jetmonsters stratum WordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerability CVE-2024-29914 6.5 MediumMarch 27, 2024
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass CVE-2023-6963 5.3 MediumFebruary 5, 2024
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification CVE-2023-6959 4.3 MediumFebruary 5, 2024
• jetmonsters getwid Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin CVE-2023-6042 7.5 HighJanuary 8, 2024
• jetmonsters hotel booking lite Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion CVE-2023-5991 9.8 CriticalDecember 26, 2023
• crocoblock jetblocks for elementor WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-48756 7.1 HighDecember 14, 2023
• jetmonsters hotel booking lite WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-28498 4.3 MediumNovember 12, 2023
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery CVE-2023-1895 8.5 HighJune 9, 2023
• jetmonsters getwid – gutenberg blocks, motopress getwid +1 more Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint CVE-2023-1910 4.3 MediumJune 9, 2023
• motopress timetable and event schedule MotoPress Timetable and Event Schedule Calendar cross site scripting CVE-2022-2844 3.5 LowAugust 16, 2022
• motopress timetable and event schedule MotoPress Timetable and Event Schedule Quick Edit admin-ajax.php cross site scripting CVE-2022-2843 3.5 LowAugust 16, 2022
• jetmonsters restaurant menu by motopress, motopress restaurant menu +1 more Restaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site Scripting CVE-2021-24722 4.8 MediumNovember 1, 2021
• unknown responsive wordpress slider, motopress motopress-slider-lite +1 more Responsive WordPress Slider <= 2.2.0 - Subscriber+ Stored Cross-Site Scripting CVE-2021-24544 5.4 MediumOctober 25, 2021
• motopress timetable and event schedule, unknown timetable and event schedule by motopress +1 more Timetable and Event Schedule by MotoPress < 2.4.0 - Arbitrary User's Hashed Password/Email/Username Disclosure CVE-2021-24585 6.5 MediumSeptember 20, 2021
• motopress timetable and event schedule, unknown timetable and event schedule by motopress +1 more Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Update CVE-2021-24584 5.4 MediumSeptember 20, 2021
• motopress timetable and event schedule, unknown timetable and event schedule by motopress +1 more Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion CVE-2021-24583 4.3 MediumSeptember 20, 2021
• motopress timetable and event schedule, unknown timetable and event schedule by motopress +1 more Timetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting CVE-2021-24724 5.4 MediumSeptember 13, 2021