WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
motopress-hotel-booking-lite
Published
2026-07-01
Title
MotoPress Hotel Booking < 6.0.4 - Authenticated (Subscriber+) Information Exposure
Slug
motopress-hotel-booking-lite
Published
2026-07-09
Title
Hotel Booking Lite < 6.0.4 - Subscriber+ Sensitive Data Disclosure via Admin Calendar AJAX Action
Slug
motopress-hotel-booking-lite
Published
2026-08-06
Title
Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint
Slug
motopress-hotel-booking-lite
Published
2026-08-06
Title
Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR
Slug
motopress-hotel-booking-lite
Published
2026-09-15
Title
MotoPress Hotel Booking < 6.3.0 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'
Slug
motopress-slider-lite
Published
2021-09-21
Title
Responsive WordPress Slider <= 2.2.0 - Subscriber+ Stored Cross-Site Scripting
Slug
motopress-slider-lite
Published
2021-09-21
Title
Responsive WordPress Slider <= 2.2.0 - Reflected Cross-Site Scripting
Slug
motor-racing-league
Published
2023-04-14
Title
Motor Racing League <= 1.9.9 - Admin+ XSS
Slug
motordesk
Published
2026-06-23
Title
MotorDesk < 1.1.3 - Cross-Site Request Forgery to Settings Update
Slug
motors-car-dealership-classified-listings
Published
2019-09-20
Title
Motors Car Dealer & Classified Ads < 1.4.1 - Multiple Issues
Slug
motors-car-dealership-classified-listings
Published
2022-11-21
Title
Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload
Slug
motors-car-dealership-classified-listings
Published
2023-04-19
Title
Motors – Car Dealer & Classified Ads < 1.4.5 - CSRF
Slug
motors-car-dealership-classified-listings
Published
2023-10-19
Title
Motors – Car Dealer & Classified Ads < 1.4.7 - Reflected XSS
Slug
motors-car-dealership-classified-listings
Published
2023-10-19
Title
Motors – Car Dealer & Classified Ads < 1.4.7 - Unauthenticated SSRF
Slug
motors-car-dealership-classified-listings
Published
2024-07-01
Title
Motors – Car Dealer, Classifieds & Listing < 1.4.11 - Missing Authorization
Slug
motors-car-dealership-classified-listings
Published
2025-01-15
Title
Motors – Car Dealer, Classifieds & Listing < 1.4.44 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title
Slug
motors-car-dealership-classified-listings
Published
2025-03-21
Title
Motors – Car Dealer, Classifieds & Listing < 1.4.58 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Listing Template Creation
Slug
motors-car-dealership-classified-listings
Published
2025-04-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.65 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Slug
motors-car-dealership-classified-listings
Published
2025-04-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.64 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
motors-car-dealership-classified-listings
Published
2025-04-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.67 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
Slug
motors-car-dealership-classified-listings
Published
2025-04-04
Title
Motors < 1.4.72 - Contributor+ Local File Inclusion
Slug
motors-car-dealership-classified-listings
Published
2025-04-04
Title
Motors < 1.4.72 - Contributor+ Stored XSS
Slug
motors-car-dealership-classified-listings
Published
2025-04-09
Title
Motors < 1.4.72 - Unauthenticated Local File Inclusion
Slug
motors-car-dealership-classified-listings
Published
2025-07-30
Title
Motors < 1.4.81 - Unauthenticated Insecure Direct Object Reference
Slug
motors-car-dealership-classified-listings
Published
2025-10-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.90 - Authenticated (Subscriber+) Arbitrary File Deletion