Magepeople inc.

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Magepeople inc. records in CISA KEV

No Magepeople inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Booking & Rental Manager 1 record LOW

Records

28 records

TI-2026-63211 CVE-2026-93928 · GHSA-5crc-jxwq-rghg

WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability

LOW 38

Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00401 Published 2026-09-22 Fixed in 2.0.8 CWE-288

TI-2026-33220 CVE-2026-45441 · GHSA-2xc5-qjqv-qjrp

WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability

LOW 38

Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00259 Published 2026-06-15 No fix listed CWE-1284

TI-2026-21548 CVE-2026-27089 · GHSA-g5vh-j4v8-x58p

WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability

LOW 38

Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2026-06-15 No fix listed CWE-290

TI-2026-80067 CVE-2026-114192 · GHSA-4p85-698g-9q5f

WordPress WpEvently plugin Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00219 Published 2026-10-24 No fix listed CWE-862

TI-2026-73976 CVE-2026-107425 · GHSA-3c6f-rmv5-23w9

Broken access control in WordPress Bus Ticket Booking plugin

LOW 34

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00262 Published 2026-10-14 No fix listed CWE-862

TI-2026-82433 CVE-2026-114181 · GHSA-jcjm-739f-85v5

Missing authorization in Taxi Booking Manager for WooCommerce plugin

LOW 30

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00242 Published 2026-10-29 No fix listed CWE-862

TI-2026-76908 CVE-2026-112824 · GHSA-45h2-jw45-2gx6

Missing authorization in Bus Ticket Booking with Seat Reservation plugin

LOW 30

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00272 Published 2026-10-20 No fix listed CWE-862

TI-2026-54430 CVE-2026-78258 · GHSA-hj2h-h964-qx85

WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability

LOW 30

Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2026-08-24 No fix listed CWE-862

TI-2026-80318 CVE-2026-115614 · GHSA-fj7c-fqrp-f6xh

Missing authorization in Booking and Rental Manager WordPress plugin

LOW 29

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00229 Published 2026-10-26 No fix listed CWE-862

TI-2026-79588 CVE-2026-112825 · GHSA-hcx3-95cp-vf47

Missing authorization in WordPress Car Rental Manager plugin

LOW 29

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00274 Published 2026-10-23 No fix listed CWE-862

TI-2026-74853 CVE-2026-103350

Input validation flaw in Booking and Rental Manager WordPress plugin

LOW 29

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00226 Published 2026-10-15 No fix listed CWE-1284

TI-2026-67635 CVE-2026-103351 · GHSA-hh49-m68v-pcf8

Input validation flaw in Taxi Booking Manager for WooCommerce

LOW 29

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00226 Published 2026-10-05 No fix listed CWE-1284

TI-2026-56437 CVE-2026-81802 · GHSA-cjp8-gfpm-f5jv

WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability

LOW 29

Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2026-09-08 No fix listed CWE-639

TI-2026-21819 CVE-2026-27405 · GHSA-v254-7qjr-r9fr

WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00307 Published 2026-05-20 No fix listed CWE-862

TI-2026-20542 CVE-2026-25426 · GHSA-3wv3-mxjf-7mwp

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00191 Published 2026-05-26 No fix listed CWE-862

TI-2025-40630 CVE-2025-66105 · GHSA-jwq4-hvc6-vpm4

WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.8 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00171 Published 2026-05-07 Fixed in 5.6.8 CWE-862

TI-2026-69933 CVE-2026-95589 · GHSA-fx9r-rw42-c776

Missing authorization in Deposits and Partial Payments for WooCommerce

LOW 28

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00212 Published 2026-10-09 No fix listed CWE-862

TI-2026-58574 CVE-2026-85303 · GHSA-29gh-g3h8-vv2x

WordPress Booking and Rental Manager plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-09-03 No fix listed CWE-79

TI-2026-22381 CVE-2026-28040 · GHSA-cr8r-qr27-mm7q

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2026-04-23 No fix listed CWE-79

TI-2026-21749 CVE-2026-27331 · GHSA-92p8-x3px-3vv6

WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability

LOW 27

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00157 Published 2026-05-26 No fix listed CWE-862

TI-2023-17524 CVE-2023-35048 · GHSA-cgc7-cg9h-8c4m

WordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin <= 1.2.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00442 Published 2023-06-23 No fix listed CWE-79

TI-2026-80473 CVE-2026-116394 · GHSA-7wq6-5695-999f

Cross-site scripting in WpEvently WordPress plugin

LOW 24

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.003 Published 2026-10-26 No fix listed CWE-80

TI-2026-78788 CVE-2026-111849 · GHSA-fjjf-67cr-2pg7

WordPress WpTravelly Plugin Broken Access Control Vulnerability

LOW 24

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-10-21 No fix listed CWE-862

TI-2026-56395 CVE-2026-81759 · GHSA-9mm7-6jx7-w9wg

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

LOW 24

Contributor Broken Access Control in WpEvently <= 5.5.0 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-08-28 No fix listed CWE-862

TI-2026-44364 CVE-2026-62063 · GHSA-g5x7-h7v7-hjvx

WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0017 Published 2026-10-01 No fix listed CWE-862

Open these records in search →