Vulnerabilities in magepeopleteam
60 resultsCVE-2025-47585MEDIUMWordPress Booking and Rental Manager plugin <= 2.3.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-69327MEDIUMWordPress Car Rental Manager plugin <= 1.0.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-121794MEDIUMTravelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler on Tour/Hotel Edit ScreenEPSS 0.3%CVE-2025-66082MEDIUMWordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-54705MEDIUMWordPress WpEvently plugin <= 4.4.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-44037MEDIUMWordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-5568MEDIUMWpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-66083MEDIUMWordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-32354MEDIUMWordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2024-49703MEDIUMWordPress WpEvently plugin <= 4.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-109590MEDIUMTravelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode AttributesEPSS 0.2%CVE-2026-97251MEDIUMWordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-49904HIGHWordPress Booking and Rental Manager plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66687MEDIUMWordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-111213MEDIUMTravelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' ParameterEPSS 0.2%CVE-2026-39572MEDIUMWordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2024-49294MEDIUMWordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-25361HIGHWordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-39565MEDIUMWordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24942MEDIUMWordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%