CVE-2026-103350 | Medium | 5.3 | 2026-10-15 | Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allow… |
CVE-2026-107425 | Medium | 6.5 | 2026-10-14 | Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Inco… |
CVE-2026-95589 | Medium | 6.5 | 2026-10-09 | Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows… |
CVE-2026-103351 | Medium | 5.3 | 2026-10-05 | Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input… |
CVE-2026-62063 | Medium | 5.4 | 2026-10-01 | Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2026-93928 | High | 7.3 | 2026-09-22 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass.
T… |
CVE-2026-81802 | Medium | 6.5 | 2026-09-08 | Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions. |
CVE-2026-85303 | Medium | 6.5 | 2026-09-03 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Booking and Rental Manager allows Stored… |
CVE-2026-81761 | Medium | 4.3 | 2026-08-28 | Subscriber Broken Access Control in WpEvently <= 5.5.0 versions. |
CVE-2026-81759 | Medium | 5.4 | 2026-08-28 | Contributor Broken Access Control in WpEvently <= 5.5.0 versions. |
CVE-2026-78258 | Medium | 5.3 | 2026-08-24 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions. |
CVE-2026-45441 | High | 7.5 | 2026-06-15 | Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions. |
CVE-2026-27089 | High | 7.5 | 2026-06-15 | Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions. |
CVE-2024-32110 | Medium | 4.3 | 2026-06-11 | Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery.
This issue affects WpEvently: from n/a through… |
CVE-2026-27331 | Medium | 6.3 | 2026-05-26 | Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects… |
CVE-2026-25444 | Medium | 4.3 | 2026-05-26 | Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects… |
CVE-2026-25426 | Medium | 5.3 | 2026-05-26 | Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2026-27405 | Medium | 6.5 | 2026-05-20 | Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects… |
CVE-2025-66105 | Medium | 5.3 | 2026-05-07 | Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2026-28040 | Medium | 6.5 | 2026-04-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allo… |