Plugin icon

MotoPress Appointment Booking

motopress-appointment-lite

Vulnerabilities:

2

Last Updated:

June 30, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-07-02
Title
MotoPress Appointment Booking < 2.4.5 - Unauthenticated Insecure Direct Object Reference to 'payment_details.booking_id' Parameter
Fixed in
Fixed in 2.4.5
CVSS
5.3 (medium)
Published
2026-06-30
Title
MotoPress Appointment Booking < 2.4.6 - Authenticated (Staff+) SQL Injection via 's' Parameter
Fixed in
Fixed in 2.4.6
CVSS
6.5 (medium)