2.7
Low
CVE-2025-12954 The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a…
Description
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Timetable and Event Schedule by MotoPress 2.4 | earliest → < 2.4.16 | 2.4.16 |
Other CVEs of Timetable and Event Schedule by MotoPress
The 5 CVEs of Timetable and Event Schedule by MotoPress →
CVE-2021-24585
The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address…
Not rated
CVE-2021-24584
The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a…
Not rated
CVE-2021-24583
The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a…
Not rated
CVE-2021-24724
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters,…
Not rated