Magepeopleteam vulnerabilities
60 CVEs and advisories name Magepeopleteam as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-121794Travelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler…
- CVE-2026-54850WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability
- CVE-2026-111213Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter
- CVE-2026-109590Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes
- CVE-2026-109381Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter
- CVE-2026-97251WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-27378WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability
- CVE-2026-81762WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability
- CVE-2026-78257WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability
- CVE-2026-73363WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability
- CVE-2026-66687WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-27380WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability
- CVE-2026-27345WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability
- CVE-2026-17166Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action
- CVE-2026-59532WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability
- CVE-2026-61985WordPress Car Rental Manager plugin <= 1.3.7 - Broken Access Control vulnerability
- CVE-2026-57404WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability
- CVE-2026-57660WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability
- CVE-2026-39572WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability
- CVE-2026-39565WordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerability
- CVE-2026-27095WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability
- CVE-2026-25361WordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-23972WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability
- CVE-2026-32384WordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability
- CVE-2026-32354WordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerability
- CVE-2025-69328WordPress Booking and Rental Manager plugin <= 2.5.9 - PHP Object Injection vulnerability
- CVE-2026-23549WordPress WpEvently plugin <= 5.1.1 - PHP Object Injection vulnerability
- CVE-2026-24954WordPress WpEvently plugin <= 5.0.8 - Deserialization of untrusted data vulnerability
- CVE-2026-24942WordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-69327WordPress Car Rental Manager plugin <= 1.0.9 - Broken Access Control vulnerability