Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

MotoPress Hotel Booking — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in MotoPress Hotel Booking, with AI-generated Chinese analysis, references, and POCs.

Vendor: jetmonsters

CVE ID Title CVSS Severity Published
CVE-2026-15238 Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR - - 2026-08-10
CVE-2026-15237 Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint - - 2026-08-10
CVE-2026-15235 Hotel Booking Lite < 6.0.4 - Subscriber+ Sensitive Data Disclosure via Admin Calendar AJAX Action - - 2026-07-30
CVE-2026-8684 MotoPress Hotel Booking <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via mphb_update_booking_notes AJAX Action CWE-862 5.3 Medium 2026-05-22
CVE-2024-4413 Hotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injection CWE-502 9.8 Critical 2024-05-10

All 5 known CVE vulnerabilities affecting MotoPress Hotel Booking with full Chinese analysis, references, and POCs where available.