CVE-2026-15238 in Hotel Booking Plugininformación

Resumen

por MITRE • 2026-08-10

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account (Subscriber and above) to modify or overwrite the personal data of any customer by supplying an arbitrary identifier.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

WPScan

Reservar

2026-07-09

Divulgación

2026-08-10

Moderación

aceptado

Artículo

VDB-387304

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Hostingprovider

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-15238
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-15238
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-15238/

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!