# cve.now: Magepeople Inc.

The newest entries naming Magepeople Inc. as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-120839](https://cve.now/CVE-2026-120839.md): WordPress WpTravelly plugin \<= 2.3.8 - Local File Inclusion vulnerability (CVSS 8.8)
- [CVE-2026-120841](https://cve.now/CVE-2026-120841.md): WordPress WpTravelly plugin \<= 2.3.8 - Local File Inclusion vulnerability (CVSS 8.8)
- [CVE-2026-121784](https://cve.now/CVE-2026-121784.md): WordPress WpBookingly plugin \<= 1.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-114181](https://cve.now/CVE-2026-114181.md): WordPress Taxi Booking Manager for WooCommerce plugin \<= 2.1.6 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-116394](https://cve.now/CVE-2026-116394.md): WordPress WpEvently plugin \<= 5.7.9 - Content Injection vulnerability (CVSS 5.3)
- [CVE-2026-115614](https://cve.now/CVE-2026-115614.md): WordPress Booking and Rental Manager plugin \<= 2.8.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-114192](https://cve.now/CVE-2026-114192.md): WordPress WpEvently plugin \<= 5.7.8 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-112825](https://cve.now/CVE-2026-112825.md): WordPress Car Rental Manager plugin \<= 1.5.3 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-111849](https://cve.now/CVE-2026-111849.md): WordPress WpTravelly plugin \<= 2.3.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-112824](https://cve.now/CVE-2026-112824.md): WordPress Bus Ticket Booking with Seat Reservation plugin \<= 5.9.7 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-103350](https://cve.now/CVE-2026-103350.md): WordPress Booking and Rental Manager plugin \<= 2.8.0 - Other vulnerability Type vulnerability (CVSS 5.3)
- [CVE-2026-107425](https://cve.now/CVE-2026-107425.md): WordPress Bus Ticket Booking with Seat Reservation plugin \<= 5.9.7 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-95589](https://cve.now/CVE-2026-95589.md): WordPress Deposits and Partial Payments for WooCommerce plugin \<= 4.0.1 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-103351](https://cve.now/CVE-2026-103351.md): WordPress Taxi Booking Manager for WooCommerce plugin \<= 2.1.1 - Other vulnerability Type vulnerability (CVSS 5.3)
- [CVE-2026-62063](https://cve.now/CVE-2026-62063.md): WordPress WpTravelly plugin \<= 2.3.1 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2026-93928](https://cve.now/CVE-2026-93928.md): WordPress Taxi Booking Manager for WooCommerce plugin \< 2.0.8 - Broken Authentication vulnerability (CVSS 7.3)
- [CVE-2026-81802](https://cve.now/CVE-2026-81802.md): WordPress WpEvently plugin \<= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
- [CVE-2026-85303](https://cve.now/CVE-2026-85303.md): WordPress Booking and Rental Manager plugin \<= 2.7.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-81761](https://cve.now/CVE-2026-81761.md): WordPress WpEvently plugin \<= 5.5.0 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2026-81759](https://cve.now/CVE-2026-81759.md): WordPress WpEvently plugin \<= 5.5.0 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2026-78258](https://cve.now/CVE-2026-78258.md): WordPress Booking and Rental Manager plugin \<= 2.7.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-45441](https://cve.now/CVE-2026-45441.md): WordPress WpEvently plugin \<= 5.3.3 - Other Vulnerability Type vulnerability (CVSS 7.5)
- [CVE-2026-27089](https://cve.now/CVE-2026-27089.md): WordPress WpTravelly plugin \<= 2.1.7 - Bypass Vulnerability vulnerability (CVSS 7.5)
- [CVE-2024-32110](https://cve.now/CVE-2024-32110.md): WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin \<= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2026-25426](https://cve.now/CVE-2026-25426.md): WordPress Taxi Booking Manager for WooCommerce plugin \<= 2.0.1 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-25444](https://cve.now/CVE-2026-25444.md): WordPress WpBookingly plugin \<= 1.2.9 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2026-27331](https://cve.now/CVE-2026-27331.md): WordPress WpTravelly plugin \<= 2.1.5 - Broken Access Control vulnerability (CVSS 6.3)
- [CVE-2026-27405](https://cve.now/CVE-2026-27405.md): WordPress WpBookingly plugin \<= 1.2.9 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-66105](https://cve.now/CVE-2025-66105.md): WordPress Bus Ticket Booking with Seat Reservation plugin \< 5.6.8 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-28040](https://cve.now/CVE-2026-28040.md): WordPress Taxi Booking Manager for WooCommerce plugin \<= 2.0.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/magepeople
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.