Vulnerabilities

TI-2026-86580 CVE-2026-120839 · GHSA-ph8f-6vfc-x44v

Local file inclusion in WordPress WpTravelly plugin

MEDIUM 40

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00412 Published 2026-11-07 No fix listed CWE-98

TI-2026-86581 CVE-2026-120841 · GHSA-x8ww-xpc5-8r48

Local file inclusion in WordPress WpTravelly plugin

MEDIUM 40

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00412 Published 2026-11-07 No fix listed CWE-98

TI-2026-86572 CVE-2026-121784 · GHSA-4h7g-g6vf-j55v

Stored cross-site scripting in WpBookingly WordPress plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-11-07 No fix listed CWE-79

TI-2026-82433 CVE-2026-114181 · GHSA-jcjm-739f-85v5

Missing authorization in Taxi Booking Manager for WooCommerce plugin

LOW 30

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00242 Published 2026-10-29 No fix listed CWE-862

TI-2026-80473 CVE-2026-116394 · GHSA-7wq6-5695-999f

Cross-site scripting in WpEvently WordPress plugin

LOW 24

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.003 Published 2026-10-26 No fix listed CWE-80

TI-2026-80318 CVE-2026-115614 · GHSA-fj7c-fqrp-f6xh

Missing authorization in Booking and Rental Manager WordPress plugin

LOW 29

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00229 Published 2026-10-26 No fix listed CWE-862

TI-2026-80067 CVE-2026-114192 · GHSA-4p85-698g-9q5f

WordPress WpEvently plugin Broken Access Control vulnerability

LOW 34

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00219 Published 2026-10-24 No fix listed CWE-862

TI-2026-79588 CVE-2026-112825 · GHSA-hcx3-95cp-vf47

Missing authorization in WordPress Car Rental Manager plugin

LOW 29

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00274 Published 2026-10-23 No fix listed CWE-862

TI-2026-78788 CVE-2026-111849 · GHSA-fjjf-67cr-2pg7

WordPress WpTravelly Plugin Broken Access Control Vulnerability

LOW 24

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-10-21 No fix listed CWE-862

TI-2026-76908 CVE-2026-112824 · GHSA-45h2-jw45-2gx6

Missing authorization in Bus Ticket Booking with Seat Reservation plugin

LOW 30

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00272 Published 2026-10-20 No fix listed CWE-862

TI-2026-74853 CVE-2026-103350

Input validation flaw in Booking and Rental Manager WordPress plugin

LOW 29

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00226 Published 2026-10-15 No fix listed CWE-1284

TI-2026-73976 CVE-2026-107425 · GHSA-3c6f-rmv5-23w9

Broken access control in WordPress Bus Ticket Booking plugin

LOW 34

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00262 Published 2026-10-14 No fix listed CWE-862

TI-2026-69933 CVE-2026-95589 · GHSA-fx9r-rw42-c776

Missing authorization in Deposits and Partial Payments for WooCommerce

LOW 28

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00212 Published 2026-10-09 No fix listed CWE-862

TI-2026-67635 CVE-2026-103351 · GHSA-hh49-m68v-pcf8

Input validation flaw in Taxi Booking Manager for WooCommerce

LOW 29

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00226 Published 2026-10-05 No fix listed CWE-1284

TI-2026-44364 CVE-2026-62063 · GHSA-g5x7-h7v7-hjvx

WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0017 Published 2026-10-01 No fix listed CWE-862

TI-2026-63211 CVE-2026-93928 · GHSA-5crc-jxwq-rghg

WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability

LOW 38

Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00401 Published 2026-09-22 Fixed in 2.0.8 CWE-288

TI-2026-56437 CVE-2026-81802 · GHSA-cjp8-gfpm-f5jv

WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability

LOW 29

Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2026-09-08 No fix listed CWE-639

TI-2026-58574 CVE-2026-85303 · GHSA-29gh-g3h8-vv2x

WordPress Booking and Rental Manager plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-09-03 No fix listed CWE-79

TI-2026-56397 CVE-2026-81761 · GHSA-hrgh-vmmc-69vj

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

LOW 20

Subscriber Broken Access Control in WpEvently <= 5.5.0 versions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2026-08-28 No fix listed CWE-862

TI-2026-56395 CVE-2026-81759 · GHSA-9mm7-6jx7-w9wg

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

LOW 24

Contributor Broken Access Control in WpEvently <= 5.5.0 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-08-28 No fix listed CWE-862

TI-2026-54430 CVE-2026-78258 · GHSA-hj2h-h964-qx85

WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability

LOW 30

Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2026-08-24 No fix listed CWE-862

TI-2026-33220 CVE-2026-45441 · GHSA-2xc5-qjqv-qjrp

WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability

LOW 38

Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00259 Published 2026-06-15 No fix listed CWE-1284

TI-2026-21548 CVE-2026-27089 · GHSA-g5vh-j4v8-x58p

WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability

LOW 38

Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2026-06-15 No fix listed CWE-290

TI-2024-21187 CVE-2024-32110 · GHSA-c3qh-j9ww-qf82

Cross-site request forgery in Magepeople inc. WpEvently

LOW 19

Cross-Site request forgery (CSRF) vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.001 Published 2026-06-11 No fix listed CWE-352

TI-2026-20542 CVE-2026-25426 · GHSA-3wv3-mxjf-7mwp

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Magepeople inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00191 Published 2026-05-26 No fix listed CWE-862

Vulnerabilities

Filters