Magepeopleteam Bus Ticket Booking With Seat Reservation vulnerabilities
5 vulnerabilities
Known vulnerabilities in Magepeopleteam Bus Ticket Booking With Seat Reservation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2024-49294magepeopleteam · bus ticket booking with seat reservation +1 moreWordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through <= 5.4.3.EPSS0.19%MediumCVE-2026-39572magepeopleteam · bus ticket booking with seat reservation +1 moreWordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerabilityExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through < 5.6.5.EPSS0.26%CriticalCVE-2026-27095magepeopleteam · bus ticket booking with seat reservation +1 moreWordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Object Injection.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through <= 5.6.0.EPSS0.63%MediumCVE-2026-97251magepeopleteam · bus ticket booking with seat reservation +1 moreWordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerabilityUnauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions.EPSS0.24%MediumCVE-2023-4067mage-people · bus_ticket_booking_with_seat_reservation +2 moreBus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site ScriptingThe Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_date' and 'tab_date_r' parameters in versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.EPSS0.43%