Magepeopleteam vulnerabilities
55 vulnerabilities
Known vulnerabilities in Magepeopleteam products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 14 products.
Products
14- Booking And Rental Manager15 vulnerabilities
- Wpevently13 vulnerabilities
- Bus Ticket Booking With Seat Reservation5 vulnerabilities
- Taxi Booking Manager For Woocommerce5 vulnerabilities
- Wptravelly4 vulnerabilities
- Car Rental Manager3 vulnerabilities
- Wpbookingly3 vulnerabilities
- Booking And Rental Manager For Bike | Car | Resort | Appointment | Dress | Equipment1 vulnerabilities
- Deposits And Partial Payments For Woocommerce1 vulnerabilities
- E Cab Taxi Booking Manager For Woocommerce1 vulnerabilities
- Event Booking Manager For Woocommerce1 vulnerabilities
- Event Booking Manager For Woocommerce – Sell Tickets, Event Registration, RSVP & Event Calendar1 vulnerabilities
- Multipurpose Ticket Booking Manager1 vulnerabilities
- Travelly – Tour & Travel Booking Manager For Woocommerce | Tour & Hotel Booking Solution1 vulnerabilities
CVE-2025-54705magepeopleteamwpevently+1
EPSS score0.25%
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 4.4.6.CVE-2025-54742magepeopleteamwpevently+1EPSS score0.37%
Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 4.4.8.CVE-2025-54713magepeopleteamtaxi booking manager for woocommerce+1EPSS score0.56%
Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.3.0.CVE-2025-26921magepeopleteambooking and rental manager+1EPSS score0.47%
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.2.6.CVE-2025-47585magepeopleteambooking and rental manager+1EPSS score0.28%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.8.CVE-2025-39457magepeopleteambooking and rental manager+1EPSS score0.34%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8.CVE-2025-39390magepeopleteambooking and rental manager+1EPSS score0.33%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.6.CVE-2025-66083magepeopleteamwpevently+1EPSS score0.25%
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4.CVE-2025-66082magepeopleteamwpevently+1EPSS score0.26%
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4.CVE-2025-27011magepeopleteambooking and rental manager+1EPSS score0.65%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows PHP Local File Inclusion.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8.CVE-2025-5568mage-peopleevent_manager_and_tickets_selling_for_woocommerce+2EPSS score0.26%
The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2025-22737magepeopleteamwptravelly+1EPSS score0.35%
Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through <= 1.8.5.CVE-2025-22720magepeopleteambooking and rental manager+1EPSS score0.33%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.1.CVE-2025-69327magepeopleteamcar rental manager+1EPSS score0.29%
Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through <= 1.0.9.CVE-2025-69328magepeopleteambooking and rental manager+1EPSS score0.41%
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.9.CVE-2025-24661magepeopleteamtaxi booking manager for woocommerce+1EPSS score0.63%
Deserialization of Untrusted Data vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Object Injection.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.1.8.CVE-2025-64266magepeopleteambooking and rental manager+1EPSS score0.43%
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.4.CVE-2025-49904magepeopleteambooking and rental manager+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <= 2.5.3.CVE-2025-32607magepeopleteamwpbookingly+1EPSS score0.89%
Deserialization of Untrusted Data vulnerability in magepeopleteam WpBookingly service-booking-manager allows Object Injection.This issue affects WpBookingly: from n/a through <= 1.3.0.CVE-2025-32145magepeopleteamwpevently+1EPSS score0.49%
Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 4.3.6.