Magepeopleteam Booking And Rental Manager vulnerabilities

15 vulnerabilities

Known vulnerabilities in Magepeopleteam Booking And Rental Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2025-26921magepeopleteambooking and rental manager+1
EPSS score
0.47%
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.2.6.
6.5CVE-2025-47585magepeopleteambooking and rental manager+1
EPSS score
0.28%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.8.
5.3CVE-2025-39457magepeopleteambooking and rental manager+1
EPSS score
0.34%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8.
5.3CVE-2025-39390magepeopleteambooking and rental manager+1
EPSS score
0.33%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.6.
8.8CVE-2025-27011magepeopleteambooking and rental manager+1
EPSS score
0.65%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows PHP Local File Inclusion.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8.
5.8CVE-2025-22720magepeopleteambooking and rental manager+1
EPSS score
0.33%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.1.
8.8CVE-2025-69328magepeopleteambooking and rental manager+1
EPSS score
0.41%
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.9.
8.8CVE-2025-64266magepeopleteambooking and rental manager+1
EPSS score
0.43%
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.4.
7.2CVE-2025-49904magepeopleteambooking and rental manager+1
EPSS score
0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <= 2.5.3.
7.5CVE-2026-59532magepeopleteambooking and rental manager+1
EPSS score
0.37%
Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.
6.5CVE-2026-57404magepeopleteambooking and rental manager+1
EPSS score
0.33%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.9.
5.3CVE-2026-57660magepeopleteambooking and rental manager+1
EPSS score
0.29%
Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions.
6.5CVE-2026-81762magepeopleteambooking and rental manager+1
EPSS score
0.30%
Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions.
8.8CVE-2026-78257magepeopleteambooking and rental manager+1
EPSS score
0.52%
Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions.
6.5CVE-2026-23972magepeopleteambooking and rental manager+1
EPSS score
0.30%
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.0.