CVE-2026-39572: falha de média gravidade em magepeopleteam Bus Ticket Booking with Seat…
WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.2%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through < 5.6.5.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
magepeopleteam · Bus Ticket Booking with Seat ReservationCVEs relacionadas — magepeopleteam Bus Ticket Booking with Seat…
No mesmo produto, das mais perigosas para as menos.
CVE-2023-4067MEDIUMBus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2026-27095CRITICALWordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-97251MEDIUMWordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2024-49294MEDIUMWordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%