Magepeopleteam vulnerabilities

Products

• Booking And Rental Manager 20
• Wpevently 20
• Wptravelly 12
• Event Booking Manager For Woocommerce 7
• Wpbookingly 6
• Bus Ticket Booking With Seat Reservation 5
• Taxi Booking Manager For Woocommerce 5
• Car Rental Manager 4
• Travelly – Tour & Travel Booking Manager For Woocommerce 3
• Deposits And Partial Payments For Woocommerce 2
• E-cab Taxi Booking Manager For Woocommerce 2
• Event Booking Manager For Woocommerce – Sell Tickets, Event Registration, Rsvp & Event Calendar 2

Newest

• magepeople inc. wptravelly WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability CVE-2026-120839 8.8 HighNovember 7, 2026
• magepeople inc. wptravelly WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability CVE-2026-120841 8.8 HighNovember 7, 2026
• magepeople inc. wpbookingly WordPress WpBookingly plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-121784 6.5 MediumNovember 7, 2026
• magepeopleteam travelly – tour & travel booking manager for woocommerce Travelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler on Tour/Hotel Edit Screen CVE-2026-121794 6.5 MediumNovember 6, 2026
• magepeopleteam booking and rental manager WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability CVE-2026-54850 6.5 MediumOctober 30, 2026
• magepeopleteam travelly – tour & travel booking manager for woocommerce Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter CVE-2026-111213 4.3 MediumOctober 28, 2026
• magepeopleteam travelly – tour & travel booking manager for woocommerce Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes CVE-2026-109590 6.4 MediumOctober 28, 2026
• magepeopleteam event booking manager for woocommerce – sell tickets, event registration, rsvp & event calendar Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter CVE-2026-109381 7.2 HighOctober 28, 2026
• magepeople inc. wpevently WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability CVE-2026-116394 5.3 MediumOctober 26, 2026
• magepeople inc. booking and rental manager WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability CVE-2026-115614 5.3 MediumOctober 26, 2026
• magepeople inc. wpevently WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability CVE-2026-114192 6.5 MediumOctober 24, 2026
• magepeople inc. car rental manager WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability CVE-2026-112825 6.5 MediumOctober 23, 2026
• magepeople inc. wptravelly WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability CVE-2026-111849 5.3 MediumOctober 21, 2026
• magepeople inc. booking and rental manager WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability CVE-2026-103350 5.3 MediumOctober 15, 2026
• magepeople inc. deposits and partial payments for woocommerce WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability CVE-2026-95589 6.5 MediumOctober 9, 2026
• magepeople inc. bus ticket booking with seat reservation WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-97251 6.5 MediumOctober 1, 2026
• magepeople inc. wptravelly WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability CVE-2026-62063 5.4 MediumOctober 1, 2026
• magepeopleteam event booking manager for woocommerce Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_list CVE-2026-91077 2.7 LowSeptember 23, 2026
• magepeopleteam event booking manager for woocommerce Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure CVE-2026-91019 4.9 MediumSeptember 17, 2026
• magepeopleteam event booking manager for woocommerce Event Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panel CVE-2026-91008 3.7 LowSeptember 17, 2026
• magepeopleteam deposits and partial payments for woocommerce WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability CVE-2026-27378 5.3 MediumSeptember 11, 2026
• magepeople inc. wpevently WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-81802 6.5 MediumSeptember 8, 2026
• magepeopleteam e-cab taxi booking manager for woocommerce E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Unauthenticated Price Manipulation via mptbm_add_to_cart CVE-2026-84045 5.3 MediumSeptember 4, 2026
• magepeople inc. booking and rental manager WordPress Booking and Rental Manager plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-85303 6.5 MediumSeptember 3, 2026
• magepeopleteam booking and rental manager WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability CVE-2026-81762 6.5 MediumAugust 31, 2026
• magepeople inc. wpevently WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability CVE-2026-81761 4.3 MediumAugust 28, 2026
• magepeople inc. wpevently WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability CVE-2026-81759 5.4 MediumAugust 28, 2026
• magepeopleteam booking and rental manager WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability CVE-2026-78257 8.8 HighAugust 27, 2026
• magepeople inc. booking and rental manager WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability CVE-2026-78258 5.3 MediumAugust 24, 2026
• magepeople inc. taxi booking manager for woocommerce WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability CVE-2026-73363 6.5 MediumAugust 19, 2026
• magepeopleteam wpbookingly WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-66687 6.5 MediumAugust 13, 2026
• magepeopleteam car rental manager WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability CVE-2026-27380 7.2 HighAugust 13, 2026
• magepeople inc. taxi booking manager for woocommerce WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability CVE-2026-27345 7.5 HighAugust 13, 2026
• magepeopleteam event booking manager for woocommerce Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event CVE-2026-16064 5.4 MediumAugust 2, 2026
• magepeopleteam event booking manager for woocommerce Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content CVE-2026-16063 5.4 MediumAugust 2, 2026
• magepeopleteam event booking manager for woocommerce Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content CVE-2026-16062 6.6 MediumAugust 2, 2026
• magepeopleteam event booking manager for woocommerce – sell tickets, event registration, rsvp & event calendar Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action CVE-2026-17166 4.3 MediumJuly 29, 2026
• magepeopleteam booking and rental manager WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability CVE-2026-59532 7.5 HighJuly 27, 2026
• magepeopleteam car rental manager WordPress Car Rental Manager plugin <= 1.3.7 - Broken Access Control vulnerability CVE-2026-61985 5.3 MediumJuly 13, 2026
• magepeopleteam booking and rental manager WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability CVE-2026-57404 6.5 MediumJuly 13, 2026
• magepeopleteam booking and rental manager WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability CVE-2026-57660 5.3 MediumJune 26, 2026
• magepeople inc. wpevently WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability CVE-2026-45441 7.5 HighJune 15, 2026
• magepeople inc. wptravelly WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability CVE-2026-27089 7.5 HighJune 15, 2026
• magepeople inc. wpevently WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32110 4.3 MediumJune 11, 2026
• magepeople inc. wpbookingly WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability CVE-2026-25444 4.3 MediumMay 26, 2026
• magepeople inc. wptravelly WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability CVE-2026-27331 6.3 MediumMay 26, 2026
• magepeople inc. wpbookingly WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability CVE-2026-27405 6.5 MediumMay 20, 2026
• magepeople inc. bus ticket booking with seat reservation WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability CVE-2026-39572 4.3 MediumApril 8, 2026
• magepeopleteam wptravelly WordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerability CVE-2026-39565 4.3 MediumApril 8, 2026
• magepeople inc. bus ticket booking with seat reservation WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability CVE-2026-27095 9.8 CriticalMarch 25, 2026
• Show olderLoading…