WordPress plugin
Timetable and Event Schedule by MotoPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium7
- Low0
All Timetable and Event Schedule by MotoPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function ≤2.4.16Update to 2.4.17 | CVE-2026-9228 | |
| Medium5.3 | Insecure Direct Object Reference to Authenticated (Contributor+) Event Disclosure ≤2.4.15Update to 2.4.16 | CVE-2025-12954 | |
| Medium6.6 | Authenticated (Admin+) PHP Object Injection ≤2.4.13Update to 2.4.14 | CVE-2024-39630 | |
| Critical9.9 | Authenticated (Contributor+) SQL Injection ≤2.4.11Update to 2.4.12 | CVE-2024-3342 | |
| Medium6.5 | Arbitrary User's Hashed Password/Email/Username Disclosure ≤2.3.19Update to 2.4.0 | CVE-2021-24585 | |
| Medium4.3 | Unauthorised Event TimeSlot Deletion ≤2.4.1Update to 2.4.2 | CVE-2021-24583 | |
| Medium6.4 | Unauthorised Event TimeSlot Update ≤2.4.1Update to 2.4.2 | CVE-2021-24584 | |
| Medium5.4 | Author+ Stored Cross-Site Scripting ≤2.3.18Update to 2.3.19 | CVE-2021-24724 | |
| High7.3 | Missing Authorization ≤2.3.8Update to 2.3.9 | CVE-2020-36840 |
- Medium4.3Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function
≤2.4.16Update to 2.4.17
- Medium5.3Insecure Direct Object Reference to Authenticated (Contributor+) Event Disclosure
≤2.4.15Update to 2.4.16
- Medium6.6Authenticated (Admin+) PHP Object Injection
≤2.4.13Update to 2.4.14
- Critical9.9Authenticated (Contributor+) SQL Injection
≤2.4.11Update to 2.4.12
- Medium6.5Arbitrary User's Hashed Password/Email/Username Disclosure
≤2.3.19Update to 2.4.0
- Medium4.3Unauthorised Event TimeSlot Deletion
≤2.4.1Update to 2.4.2
- Medium6.4Unauthorised Event TimeSlot Update
≤2.4.1Update to 2.4.2
- Medium5.4Author+ Stored Cross-Site Scripting
≤2.3.18Update to 2.3.19
- High7.3Missing Authorization
≤2.3.8Update to 2.3.9
Timetable and Event Schedule by MotoPress: common questions
Does Timetable and Event Schedule by MotoPress have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Timetable and Event Schedule by MotoPress: 1 critical, 1 high, 7 medium. None are known to affect version null.
How do I check which version of Timetable and Event Schedule by MotoPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Timetable and Event Schedule by MotoPress vulnerability?
CVE-2026-9228, published May 27, 2026: Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function. Severity: Medium (CVSS 4.3).
Is any Timetable and Event Schedule by MotoPress vulnerability listed in CISA KEV?
No. None of the known Timetable and Event Schedule by MotoPress vulnerabilities is currently listed in the CISA KEV catalog.