Magepeople Team vulnerabilities
11 vulnerabilities
Known vulnerabilities in Magepeople Team products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
Products
8- Event Manager And Tickets Selling Plugin For Woocommerce3 vulnerabilities
- Wptravelly2 vulnerabilities
- Booking And Rental Manager For Bike1 vulnerabilities
- Bus Ticket Booking With Seat Reservation1 vulnerabilities
- Event Manager And Tickets Selling Plugin For Woocommerce – Wpevently – Wordpress Plugin1 vulnerabilities
- Event Manager For Woocommerce1 vulnerabilities
- Taxi Booking Manager For Woocommerce1 vulnerabilities
- Wpbusticketly1 vulnerabilities
CVE-2022-47164mage-peopleevent_manager_and_tickets_selling_plugin_for_woocommerce+2
EPSS score0.29%
Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 3.7.7 versions.CVE-2024-43138mage-peopleevent_manager_and_tickets_selling_for_woocommerce+2EPSS score0.63%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1.CVE-2024-43212magepeople teamwptravelly+1EPSS score0.56%
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7.CVE-2024-43985mage-peoplebus_ticket_booking_with_seat_reservation+2EPSS score0.28%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5.CVE-2024-43986mage-peopleecab_taxi_booking_manager+2EPSS score0.28%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9.CVE-2024-24796mage-peopleevent_manager_and_tickets_selling_for_woocommerce+2EPSS score0.50%
Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1.CVE-2024-32450magepeople teamwptravelly+1EPSS score0.21%
Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team WpTravelly.This issue affects WpTravelly: from n/a through 1.6.0.CVE-2023-36383mage-peopleevent_manager_and_tickets_selling_for_woocommerce+1EPSS score0.33%
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 3.9.5 versions.CVE-2023-28422mage-peopleevent_manager_and_tickets_selling_for_woocommerce+2EPSS score0.37%
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce <= 3.8.6. versions.CVE-2023-30496mage-peoplebus_ticket_booking_with_seat_reservation+2EPSS score0.40%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MagePeople Team WpBusTicketly plugin <= 5.2.5 versions.CVE-2023-35048magepeople teambooking and rental manager for bike+2EPSS score0.44%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin <= 1.2.1 versions.