Magepeopleteam
50 CVEs across 13 Magepeopleteam products. Browse Magepeopleteam vulnerabilities, severities, and proof-of-concept exploits.
Magepeopleteam products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66687 | Medium | 6.5 | 2026-08-13 | Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions. |
CVE-2026-27380 | High | 7.2 | 2026-08-13 | Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions. |
CVE-2026-27345 | High | 7.5 | 2026-08-13 | Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions. |
CVE-2026-17166 | Medium | 4.3 | 2026-07-29 | The Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar plugin for WordPress is vulnerable to authorization bypass… |
CVE-2026-59532 | High | 7.5 | 2026-07-27 | Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. |
CVE-2026-61985 | Medium | 5.3 | 2026-07-13 | Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2026-57404 | Medium | 6.5 | 2026-07-13 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Confi… |
CVE-2026-57660 | Medium | 5.3 | 2026-06-26 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions. |
CVE-2026-39572 | Medium | 4.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-… |
CVE-2026-39565 | Medium | 4.3 | 2026-04-08 | Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2026-27095 | Critical | 9.8 | 2026-03-25 | Deserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Obje… |
CVE-2026-25361 | High | 7.1 | 2026-03-25 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpEvently mage-eventpress allows Reflected… |
CVE-2026-23972 | Medium | 6.5 | 2026-03-25 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Confi… |
CVE-2026-32384 | High | 7.5 | 2026-03-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpBookingly service-boo… |
CVE-2026-32354 | Medium | 5.3 | 2026-03-13 | Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue… |
CVE-2025-69328 | High | 8.8 | 2026-02-20 | Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection… |
CVE-2026-23549 | Critical | 9.8 | 2026-02-19 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a thro… |
CVE-2026-24954 | High | 8.8 | 2026-02-03 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a thro… |
CVE-2026-24942 | Medium | 4.3 | 2026-02-03 | Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: fro… |
CVE-2025-69327 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-64266 | High | 8.8 | 2025-12-18 | Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection… |
CVE-2025-66083 | Medium | 5.3 | 2025-11-21 | Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-66082 | Medium | 5.3 | 2025-11-21 | Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-49904 | High | 7.1 | 2025-11-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-ren… |
CVE-2025-54742 | High | 8.8 | 2025-08-28 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a thro… |
CVE-2025-54713 | Critical | 9.8 | 2025-08-20 | Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows… |
CVE-2025-8898 | Critical | 9.8 | 2025-08-16 | The Taxi Booking Manager for Woocommerce | E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and inc… |
CVE-2025-54705 | Medium | 4.3 | 2025-08-14 | Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-5568 | Medium | 6.4 | 2025-06-07 | The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insu… |
CVE-2025-47585 | Medium | 6.5 | 2025-06-02 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not… |
CVE-2025-39390 | Medium | 5.3 | 2025-04-24 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not… |
CVE-2025-39457 | Medium | 5.3 | 2025-04-17 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Confi… |
CVE-2025-27011 | High | 7.5 | 2025-04-15 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Mana… |
CVE-2025-32607 | Critical | 9.8 | 2025-04-11 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpBookingly service-booking-manager allows Object Injection.This issue affects WpBookingly: f… |
CVE-2025-32145 | High | 8.8 | 2025-04-10 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a thro… |
CVE-2025-30892 | High | 8.8 | 2025-04-01 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Object Injection.This issue affects WpTravelly: from n… |
CVE-2025-30895 | High | 7.5 | 2025-03-27 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in magepeopleteam WpEvently mage-eventpress allows PHP Local File… |
CVE-2025-30891 | High | 8.8 | 2025-03-27 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpTravelly tour-booking… |
CVE-2025-30887 | Medium | 5.3 | 2025-03-27 | Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-30839 | Medium | 5.3 | 2025-03-27 | Missing Authorization vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured A… |
CVE-2025-26921 | High | 8.8 | 2025-03-15 | Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection… |
CVE-2025-24661 | High | 8.8 | 2025-02-03 | Deserialization of Untrusted Data vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Object Injection.This i… |
CVE-2025-22720 | Medium | 5.8 | 2025-01-31 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Confi… |
CVE-2025-22737 | Medium | 5.3 | 2025-01-15 | Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issu… |
CVE-2024-12412 | Medium | 6.1 | 2025-01-11 | The Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin plugin for WordPress is vulnerable to St… |
CVE-2024-49294 | Medium | 4.3 | 2025-01-07 | Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Cros… |
CVE-2024-49703 | Medium | 6.5 | 2024-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpEvently mage-eventpress.This issue affec… |
CVE-2024-44037 | Medium | 5.9 | 2024-10-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Multipurpose Ticket Booking Manager bus-bo… |
CVE-2024-0434 | Medium | 5.3 | 2024-05-29 | The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missin… |
CVE-2023-4067 | Medium | 6.1 | 2023-08-02 | The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_date' and 'tab_date_r' parameter… |