low2.7
CVE-2025-12954
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to…
Impact
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor.
Affected products
| Product | Affected versions |
|---|---|
| Timetable And Event Schedule By MotoPress WordPress Plugin | before 2.4.16 |
Versions were read from the advisory text. No structured product data has been published for this record yet.