CveMateVulnerability intelligence

Magepeople Inc. vulnerabilities

22 vulnerabilities

Known vulnerabilities in Magepeople Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.

Products

7

Wpevently5 vulnerabilities
Taxi Booking Manager For Woocommerce4 vulnerabilities
Wptravelly4 vulnerabilities
Booking And Rental Manager3 vulnerabilities
Bus Ticket Booking With Seat Reservation3 vulnerabilities
Wpbookingly2 vulnerabilities
Deposits And Partial Payments For Woocommerce1 vulnerabilities

CVE-2026-111849magepeople inc.wptravelly20h ago21-10-2026 13:00Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5.CVE-2026-112824magepeople inc.bus ticket booking with seat reservation1d ago20-10-2026 15:13

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7.CVE-2026-103350magepeople inc.booking and rental manager6d ago15-10-2026 17:47

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important Client Functionality.This issue affects Booking and Rental Manager: from n/a through 2.8.0.CVE-2026-107425magepeople inc.bus ticket booking with seat reservation7d ago14-10-2026 12:08

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7.CVE-2025-66105magepeople inc.bus ticket booking with seat reservation+15mo ago07-05-2026 07:46

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bus Ticket Booking with Seat Reservation: from n/a before 5.6.8.CVE-2024-32110magepeople inc.wpevently+204mo ago11-06-2026 07:05

Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery. This issue affects WpEvently: from n/a through 4.1.2.CVE-2026-62063magepeople inc.wptravelly+120d ago01-10-2026 12:38

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.CVE-2026-25444magepeople inc.wpbookingly+14mo ago26-05-2026 19:30

Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.CVE-2026-25426magepeople inc.taxi booking manager for woocommerce+14mo ago26-05-2026 19:32

Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.1.CVE-2026-103351magepeople inc.taxi booking manager for woocommerce17d ago05-10-2026 08:58

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1.CVE-2026-27405magepeople inc.wpbookingly+15mo ago20-05-2026 12:16

Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.CVE-2026-27331magepeople inc.wptravelly+14mo ago26-05-2026 19:29

Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a through 2.1.5.CVE-2026-27089magepeople inc.wptravelly+14mo ago15-06-2026 20:17

Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.CVE-2026-93928magepeople inc.taxi booking manager for woocommerce+11mo ago22-09-2026 08:42

Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.CVE-2026-45441magepeople inc.wpevently+14mo ago15-06-2026 20:18

Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.CVE-2026-95589magepeople inc.deposits and partial payments for woocommerce+112d ago09-10-2026 10:00

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.CVE-2026-28040magepeople inc.taxi booking manager for woocommerce+16mo ago23-04-2026 11:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.0.CVE-2026-81759magepeople inc.wpevently+11mo ago28-08-2026 14:33

Contributor Broken Access Control in WpEvently <= 5.5.0 versions.CVE-2026-81761magepeople inc.wpevently+11mo ago28-08-2026 14:33

Subscriber Broken Access Control in WpEvently <= 5.5.0 versions.CVE-2026-81802magepeople inc.wpevently+11mo ago08-09-2026 07:15

Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.