magepeopleteam vulnerabilities
60 published CVEs name magepeopleteam among the affected products.
- 60Published CVEs60 of them scored
- 33Last 12 monthspublished in the last year
- 5Critical19 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-121794
Travelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler on Tour/Hotel Edit Screen
magepeopleteam · Travelly – Tour & Travel Booking Manager for WooCommerce
Medium6.5 - CVE-2026-54850
WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability
magepeopleteam · Booking and Rental Manager
Medium6.5 - CVE-2026-111213
Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter
magepeopleteam · Travelly – Tour & Travel Booking Manager for WooCommerce
Medium4.3 - CVE-2026-109590
Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes
magepeopleteam · Travelly – Tour & Travel Booking Manager for WooCommerce
Medium6.4 - CVE-2026-109381
Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter
magepeopleteam · Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar
High7.2 - CVE-2026-97251
WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability
magepeopleteam · Bus Ticket Booking with Seat Reservation
Medium6.5 - CVE-2026-27378
WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability
magepeopleteam · Deposits and Partial Payments for WooCommerce
Medium5.3 - CVE-2026-81762
WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability
magepeopleteam · Booking and Rental Manager
Medium6.5 - CVE-2026-78257
WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability
magepeopleteam · Booking and Rental Manager
High8.8 - CVE-2026-73363
WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability
magepeopleteam · Taxi Booking Manager for WooCommerce
Medium6.5