motopress-appointment-lite
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MotoPress Appointment Booking <= 2.4.8 - Unauthenticated Stored Cross-Site Scripting via Customer Name via /customers/create REST Endpoint | motopress-appointment-lite | WordPress | Medium | Fix reported | |
| MotoPress Appointment Booking < 2.4.8 - Unauthenticated Insecure Direct Object Reference | motopress-appointment-lite | WordPress | Medium | Fix reported | |
| MotoPress Appointment Booking <= 2.4.4 - Unauthenticated Insecure Direct Object Reference to 'payment_details.booking_id' Parameter | motopress-appointment-lite | WordPress | Medium | Fix reported | |
| MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameter | motopress-appointment-lite | WordPress | Medium | Fix reported |