MagePeople Team
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Event Manager and Tickets Selling Plugin for WooCommerce | 3 | – | Jul 18, 2023 |
| WpTravelly | 2 | – | Nov 1, 2024 |
| Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin | 1 | – | Feb 12, 2024 |
| Booking and Rental Manager for Bike | 1 | – | Jun 23, 2023 |
| Taxi Booking Manager for WooCommerce | 1 | – | Aug 29, 2024 |
| WpBusTicketly | 1 | – | Nov 22, 2023 |
| Event Manager for WooCommerce | 1 | – | Aug 13, 2024 |
| Bus Ticket Booking with Seat Reservation | 1 | – | Sep 17, 2024 |
Exploited and recent CVEs
- CVE-2024-43212 WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability 0.6%
- CVE-2024-43985 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-43986 WordPress E-cab taxi booking manager plugin <=1.0.9 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-43138 WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerability 0.6%
- CVE-2024-32450 WordPress WpTravelly plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-24796 WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection 0.5%
- CVE-2023-30496 WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.2.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-36383 WordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS) 0.3%
- CVE-2023-35048 WordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-47164 WordPress Event Manager for WooCommerce Plugin <= 3.7.7 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-28422 WordPress Event Manager for WooCommerce Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS) 0.4%