Vendor

    MotoPress

    26 known vulnerabilities in products by MotoPress, 0 of them actively exploited (CISA KEV).

    Key figures

    26

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in MotoPress
    CriticalCVE-2023-5991

    Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion

    		9.8
    MediumCVE-2021-24585

    Timetable and Event Schedule by MotoPress: Exposure of Sensitive Information to an Unauthorized Actor

    		6.5
    MediumCVE-2021-24583

    Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion

    		4.3
    CriticalCVE-2023-1895

    Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated (Subscriber+) Server Side Request Forgery

    also in 1 other product

    		8.5
    HighCVE-2023-6042

    Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin

    		7.5
    MediumCVE-2021-24724

    Timetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting

    		5.4
    MediumCVE-2024-3588

    Jetmonsters Getwid: Cross-site Scripting

    also in 1 other product

    		6.4
    CriticalCVE-2020-36840

    Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorization

    also in 1 other product

    		7.3
    HighCVE-2023-48756

    WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    MediumCVE-2022-50948

    Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting

    		6.4
    MediumCVE-2023-6963

    Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass

    also in 1 other product

    		5.3
    MediumCVE-2021-24544

    Responsive WordPress Slider <= 2.2.0 - Subscriber+ Stored Cross-Site Scripting

    		5.4
    MediumCVE-2024-1948

    Jetmonsters Getwid: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2021-24722

    Restaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site Scripting

    		4.8
    MediumCVE-2024-10872

    Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-29914

    WordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2021-24584

    Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Update

    		5.4
    MediumCVE-2024-13642

    Jetmonsters Stratum Widgets for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-1910

    Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint

    also in 1 other product

    		4.3
    MediumCVE-2022-2843

    MotoPress Timetable and Event Schedule Quick Edit admin-ajax.php cross site scripting

    		3.5
    MediumCVE-2024-39630

    MotoPress Timetable and Event Schedule: Deserialization of Untrusted Data

    		5.5
    MediumCVE-2023-6959

    Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification

    also in 1 other product

    		4.3
    MediumCVE-2024-6489

    Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update

    also in 1 other product

    		5.3
    MediumCVE-2024-6491

    Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update

    also in 1 other product

    		4.3
    MediumCVE-2022-2844

    MotoPress Timetable and Event Schedule Calendar cross site scripting

    		3.5

    All vulnerabilities in search

    Products

    Products by MotoPress
    Getwid100
    Timetable and Event Schedule by MotoPress90
    MotoPress Hotel Booking Lite30