Vulnerabilidades em Magepeople inc.
9 resultadosAnálise Vexday
Magepeople Inc. apresenta volume significativo de vulnerabilidades recentes, com 8 das 9 CVEs publicadas nos últimos 90 dias, indicando ciclo ativo de descobertas. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e não há críticas confirmadas, reduzindo o risco imediato. A fraqueza dominante é CWE-862 (falta de autorização), sugerindo problemas de controle de acesso que demandam validação em implementações sensíveis.
CVE-2026-27405MEDIUMWordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-27089HIGHWordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2026-45441HIGHWordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerabilityEPSS 0.3%CVE-2026-25426MEDIUMWordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-66105MEDIUMWordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-28040MEDIUMWordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-27331MEDIUMWordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-25444MEDIUMWordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-32110MEDIUMWordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%