Plugin icon

Timetable and Event Schedule by MotoPress

mp-timetable

Vulnerabilities:

8

Last Updated:

May 25, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-05-27
Title
Timetable and Event Schedule by MotoPress < 2.4.17 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function
Fixed in
Fixed in 2.4.17
CVSS
2.7 (low)
Published
2025-11-12
Title
Timetable and Event Schedule by MotoPress < 2.4.16 - Contributor+ Event Disclosure via IDOR
Fixed in
Fixed in 2.4.16
CVSS
2.7 (low)
Published
2024-07-22
Title
Timetable and Event Schedule < 2.4.14 - Admin+ PHP Object Injection
Fixed in
Fixed in 2.4.14
CVSS
6.6 (medium)
Published
2024-04-26
Title
Timetable and Event Schedule by MotoPress < 2.4.12 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 2.4.12
CVSS
9.9 (critical)
Published
2021-08-23
Title
Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion
Fixed in
Fixed in 2.4.2
CVSS
5.4 (medium)
Published
2021-08-23
Title
Timetable and Event Schedule by MotoPress < 2.4.0 - Arbitrary User's Hashed Password/Email/Username Disclosure
Fixed in
Fixed in 2.4.0
CVSS
6.5 (medium)
Published
2021-08-23
Title
Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Update
Fixed in
Fixed in 2.4.2
CVSS
4.3 (medium)
Published
2021-08-23
Title
Timetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.19
CVSS
6.5 (medium)