magepeopleteam vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 202526
4. 202630

Newest CVEs

• CVE-2026-121794

  Travelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler on Tour/Hotel Edit Screen

  magepeopleteam · Travelly – Tour & Travel Booking Manager for WooCommerce

  Medium6.5
• CVE-2026-54850

  WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability

  magepeopleteam · Booking and Rental Manager

  Medium6.5
• CVE-2026-111213

  Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter

  magepeopleteam · Travelly – Tour & Travel Booking Manager for WooCommerce

  Medium4.3
• CVE-2026-109590

  Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes

  magepeopleteam · Travelly – Tour & Travel Booking Manager for WooCommerce

  Medium6.4
• CVE-2026-109381

  Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter

  magepeopleteam · Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar

  High7.2
• CVE-2026-97251

  WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability

  magepeopleteam · Bus Ticket Booking with Seat Reservation

  Medium6.5
• CVE-2026-27378

  WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability

  magepeopleteam · Deposits and Partial Payments for WooCommerce

  Medium5.3
• CVE-2026-81762

  WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability

  magepeopleteam · Booking and Rental Manager

  Medium6.5
• CVE-2026-78257

  WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability

  magepeopleteam · Booking and Rental Manager

  High8.8
• CVE-2026-73363

  WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability

  magepeopleteam · Taxi Booking Manager for WooCommerce

  Medium6.5