2.7
Faible
CVE-2025-12954 The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a…
Description
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Timetable and Event Schedule by MotoPress 2.4 | premières → < 2.4.16 | 2.4.16 |
Autres CVE de Timetable and Event Schedule by MotoPress
Les 5 CVE de Timetable and Event Schedule by MotoPress →
CVE-2021-24585
The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address…
Non notée
CVE-2021-24584
The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a…
Non notée
CVE-2021-24583
The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a…
Non notée
CVE-2021-24724
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters,…
Non notée