Plugin icon

MotoPress Appointment Booking

motopress-appointment-lite

Vulnerabilities:

3

Last Updated:

August 26, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-08-31
Title
Appointment Booking Lite < 2.4.8 - Unauthenticated Arbitrary Reservation Deletion
Fixed in
Fixed in 2.4.8
CVSS
5.3 (medium)
Published
2026-07-02
Title
MotoPress Appointment Booking < 2.4.5 - Unauthenticated Insecure Direct Object Reference to 'payment_details.booking_id' Parameter
Fixed in
Fixed in 2.4.5
CVSS
5.3 (medium)
Published
2026-06-30
Title
MotoPress Appointment Booking < 2.4.6 - Authenticated (Staff+) SQL Injection via 's' Parameter
Fixed in
Fixed in 2.4.6
CVSS
6.5 (medium)