Read the docs

ComMotion

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ComMotion records in CISA KEV

No ComMotion vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-16666 CVE-2025-22785 · GHSA-9mgw-3v2h-j5xq

WordPress Course Booking System plugin <= 6.0.6 - SQL Injection vulnerability

Priority MEDIUM 52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ComMotion Course Booking System course-booking-system allows SQL Injection.This issue affects Course Booking System: f…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.03013 Published 2025-01-15 No fix listed CWE-89
TI-2025-23573 CVE-2025-32508 · GHSA-hg4w-h686-f7p2

WordPress Course Booking System plugin <= 6.1.2 - Reflected Cross Site Scripting (XSS) Vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ComMotion Course Booking System course-booking-system allows Reflected XSS.This issue affects Course Booking System: f…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2025-23350 CVE-2025-32253 · GHSA-hq72-23q2-wcfw

WordPress Course Booking System Plugin <= 6.1 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in ComMotion Course Booking System course-booking-system allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Course Booking System: from n/a through <= 6…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00642 Published 2025-04-04 No fix listed CWE-862
Open these records in search →