MotoPress Hotel Booking vulnerabilities

2 known vulnerabilities in MotoPress Hotel Booking from Jetmonsters. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  MotoPress Hotel Booking: Improper Neutralization of Input During Web Page Generation

  CVE-2026-90650Sep 15, 2026Jetmonsters

  The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook event object 'id' in all versions up to, and including, 6.2.4 due to insufficient input sanitization and output escaping. This makes it possibl

• 9.8 Critical severity

  MotoPress Hotel Booking: Deserialization of Untrusted Data

  CVE-2024-4413May 14, 2024Jetmonsters

  The Hotel Booking Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.11.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP cha