Motopress
Motopress Timetable AND Event Schedule: vulnerabilidades y CVE
Motopress Timetable AND Event Schedule tiene 11 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses2
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-9228 | Media (4.3) | 0.38% | — | 28 may 2026 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.16 via the action_get_event_data due to missing validation… |
| CVE-2025-12954 | Baja (2.7) | 0.21% | — | 3 dic 2025 | The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low… |
| CVE-2020-36840 | Crítica (9.8) | 0.41% | — | 16 oct 2024 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_route_url() function called via a nopriv AJAX action in versions… |
| CVE-2024-39630 | Media (5.5) | 0.30% | — | 1 ago 2024 | Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedule: from n/a through 2.4.13. |
| CVE-2024-3342 | Crítica (9.9) | 0.56% | — | 27 abr 2024 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attribute of the 'mp-timetable' shortcode in all versions up to, and including, 2.4.11 due to… |
| CVE-2022-2844 | Media (6.1) | 0.50% | — | 16 ago 2022 | A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This affects an unknown part of the file… |
| CVE-2022-2843 | Media (6.1) | 0.58% | — | 16 ago 2022 | A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /wp-admin/admin-ajax.php of the component Quick… |
| CVE-2021-24585 | Media (6.5) | 1.2% | — | 20 sept 2021 | The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sensitive data) of the user related to the Even Head of the Timeslot in the… |
| CVE-2021-24584 | Media (5.4) | 0.51% | — | 20 sept 2021 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_posts capability (contributor+) to update arbitrary timeslot… |
| CVE-2021-24583 | Media (4.3) | 1.6% | — | 20 sept 2021 | The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any user with the edit_posts capability (contributor+) to delete arbitrary timeslot… |
| CVE-2021-24724 | Media (5.4) | 0.89% | — | 13 sept 2021 | The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.