Vulnerabilities in magepeopleteam
54 resultsVexday analysis
A magepeopleteam acumula 45 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa conhecida, reduzindo o risco imediato. Das 5 críticas identificadas, apenas 3 foram publicadas recentemente (últimos 90 dias), indicando um fluxo moderado de novos achados; a fraqueza dominante CWE-862 (falta de autorização) sugere problemas estruturais no controle de acesso que demandam revisão arquitetural.
CVE-2026-59532HIGHWordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerabilityEPSS 0.3%CVE-2026-32354MEDIUMWordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2024-49703MEDIUMWordPress WpEvently plugin <= 4.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-27345HIGHWordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-17166MEDIUMEvent Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX ActionEPSS 0.2%CVE-2025-49904HIGHWordPress Booking and Rental Manager plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-27378MEDIUMWordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39572MEDIUMWordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2024-49294MEDIUMWordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-25361HIGHWordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-73363MEDIUMWordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39565MEDIUMWordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-66687MEDIUMWordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24942MEDIUMWordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%