Threats tagged 'ghsa-vqh4-pqm8-4r46'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-15237MotoPress Hotel Booking (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-08-10CVE Database V5CVE-2026-15237 The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a REST endpoint that creates payment records, allowing unauthenticated users to create completed payment records against arbitrary bookings and falsely mark them as paid. EPSS 0.3%Vulnerability CWE-862 #ghsa-vqh4-pqm8-4r46	CVE Database V5	2026-08-10

Page 1 of 1