Vulnerabilidades em MagePeople Team
11 resultadosAnálise Vexday
MagePeople Team apresenta 11 vulnerabilidades catalogadas, todas de severidade abaixo de crítica, com nenhuma explorada ativamente no momento. A fraqueza dominante é injeção de scripts (CWE-79), típica de aplicações web, mas a ausência de divulgações recentes indica que o risco imediato é baixo; recomenda-se monitorar regularmente, pois o histórico mostra vulnerabilidades em aberto.
CVE-2024-43138MEDIUMWordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-43212HIGHWordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2024-24796HIGHWordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object InjectionEPSS 0.5%CVE-2023-35048MEDIUMWordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-30496HIGHWordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.2.5 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-28422MEDIUMWordPress Event Manager for WooCommerce Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-36383MEDIUMWordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2022-47164MEDIUMWordPress Event Manager for WooCommerce Plugin <= 3.7.7 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2024-43985MEDIUMWordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-43986MEDIUMWordPress E-cab taxi booking manager plugin <=1.0.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-32450MEDIUMWordPress WpTravelly plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%