Unknown MotoPress Hotel Booking

• CVE-2026-15238 Medium 5.4 Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR 0.2%
• CVE-2026-15237 Medium 5.3 Hotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST Endpoint 0.3%
• CVE-2026-15235 Medium 4.3 Hotel Booking Lite < 6.0.4 - Subscriber+ Sensitive Data Disclosure via Admin Calendar AJAX Action 0.3%