What’s Vulnerable › Products

jetmonsters MotoPress Hotel Booking vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your jetmonsters MotoPress Hotel Booking version is affected

Latest jetmonsters MotoPress Hotel Booking vulnerabilities

• CVE-2026-90650 — MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id' (CVSS 7.2)
• CVE-2026-8684 — MotoPress Hotel Booking <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via mphb_update_booking_notes AJAX Action (CVSS 5.3)