A vulnerability marked as critical has been reported in jetmonsters MotoPress Hotel Booking Plugin up to 6.0.1 on WordPress. The affected element is an unknown function. This manipulation causes missing authorization. This vulnerability appears as CVE-2026-8684 . The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.