Skip to contentMagepeopleteam Event Booking Manager For Woocommerce vulnerabilities
- magepeopleteam event booking manager for woocommerce – sell tickets, event registration, rsvp & event calendarEvent Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' ParameterCVE-2026-1093817.2 High
- magepeopleteam event booking manager for woocommerceEvent Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_listCVE-2026-910772.7 Low
- magepeopleteam event booking manager for woocommerceEvent Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential DisclosureCVE-2026-910194.9 Medium
- magepeopleteam event booking manager for woocommerceEvent Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation PanelCVE-2026-910083.7 Low
- magepeopleteam event booking manager for woocommerceEvent Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_eventCVE-2026-160645.4 Medium
- magepeopleteam event booking manager for woocommerceEvent Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline ContentCVE-2026-160635.4 Medium
- magepeopleteam event booking manager for woocommerceEvent Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ ContentCVE-2026-160626.6 Medium
- magepeopleteam event booking manager for woocommerce – sell tickets, event registration, rsvp & event calendarEvent Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX ActionCVE-2026-171664.3 Medium
- mage-people event manager and tickets selling for woocommerce, magepeopleteam event booking manager for woocommerce +1 moreWpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-55686.4 Medium