UNKNOWN NVD

CVE-2026-15238

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user wit

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account (Subscriber and above) to modify or overwrite the personal data of any customer by supplying an arbitrary identifier.

References

https://wpscan.com/vulnerability/7283a28a-7241-4b9e-8fc5-5b427191c80e/

Published: 2026-08-10 · Source: NVD · Feed updated: 2026-08-10

This unknown severity vulnerability was published on 2026-08-10 via NVD.

vulnfeed aggregates 9044 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.