MA
Vendor
magepeopleteam
19
CVEs
0
On KEV
4
New 30D
Products
TT6.4
Travelly – Tour & Travel Booking Manager for WooCommerce
magepeopleteam
2 CVEs0 on KEV2 new
BT6.5
Bus Ticket Booking with Seat Reservation
magepeopleteam
3 CVEs0 on KEV1 new
EB7.2
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar
magepeopleteam
2 CVEs0 on KEV1 new
BA8.8
Booking and Rental Manager
magepeopleteam
5 CVEs0 on KEV0 new
CR7.2
Car Rental Manager
magepeopleteam
2 CVEs0 on KEV0 new
TB7.5
Taxi Booking Manager for WooCommerce
magepeopleteam
2 CVEs0 on KEV0 new
DA5.3
Deposits and Partial Payments for WooCommerce
magepeopleteam
1 CVEs0 on KEV0 new
WP6.5
WpBookingly
magepeopleteam
1 CVEs0 on KEV0 new
WP4.3
WpTravelly
magepeopleteam
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111213 New | TT Travelly – Tour & Travel Booking Manager for WooCommerce magepeopleteam | 4.3 | Oct 28 | Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter |
| CVE-2026-109590 New | TT Travelly – Tour & Travel Booking Manager for WooCommerce magepeopleteam | 6.4 | Oct 28 | Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes |
| CVE-2026-109381 New | EB Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar magepeopleteam | 7.2 | Oct 28 | Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter |
| CVE-2026-97251 | BT Bus Ticket Booking with Seat Reservation magepeopleteam | 6.5 | Oct 1 | WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-27378 | DA Deposits and Partial Payments for WooCommerce magepeopleteam | 5.3 | Sep 11 | WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability |
| CVE-2026-81762 | BA Booking and Rental Manager magepeopleteam | 6.5 | Aug 31 | WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability |
| CVE-2026-78257 | BA Booking and Rental Manager magepeopleteam | 8.8 | Aug 27 | WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability |
| CVE-2026-73363 | TB Taxi Booking Manager for WooCommerce magepeopleteam | 6.5 | Aug 19 | WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability |
| CVE-2026-66687 | WP WpBookingly magepeopleteam | 6.5 | Aug 13 | WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27380 | CR Car Rental Manager magepeopleteam | 7.2 | Aug 13 | WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability |
| CVE-2026-27345 | TB Taxi Booking Manager for WooCommerce magepeopleteam | 7.5 | Aug 13 | WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability |
| CVE-2026-17166 | EB Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar magepeopleteam | 4.3 | Jul 29 | Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action |
| CVE-2026-59532 | BA Booking and Rental Manager magepeopleteam | 7.5 | Jul 27 | WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability |
| CVE-2026-61985 | CR Car Rental Manager magepeopleteam | 5.3 | Jul 13 | WordPress Car Rental Manager plugin <= 1.3.7 - Broken Access Control vulnerability |
| CVE-2026-57404 | BA Booking and Rental Manager magepeopleteam | 6.5 | Jul 13 | WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability |
| CVE-2026-57660 | BA Booking and Rental Manager magepeopleteam | 5.3 | Jun 26 | WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability |
| CVE-2026-39572 | BT Bus Ticket Booking with Seat Reservation magepeopleteam | 4.3 | Apr 8 | WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability |
| CVE-2026-39565 | WP WpTravelly magepeopleteam | 4.3 | Apr 8 | WordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerability |
| CVE-2024-49294 | BT Bus Ticket Booking with Seat Reservation magepeopleteam | 4.3 | Jan 7 | WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability |