Magepeople inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WpEvently | 7 | – | Oct 26, 2026 |
| WpTravelly | 6 | – | Nov 7, 2026 |
| Taxi Booking Manager for WooCommerce | 5 | – | Oct 29, 2026 |
| Booking and Rental Manager | 4 | – | Oct 26, 2026 |
| WpBookingly | 3 | – | Nov 7, 2026 |
| Bus Ticket Booking with Seat Reservation | 3 | – | Oct 20, 2026 |
| Deposits and Partial Payments for WooCommerce | 1 | – | Oct 9, 2026 |
| Car Rental Manager | 1 | – | Oct 23, 2026 |
Exploited and recent CVEs
- CVE-2026-120839 WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability –
- CVE-2026-120841 WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability –
- CVE-2026-121784 WordPress WpBookingly plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability –
- CVE-2026-114181 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerability 0.2%
- CVE-2026-116394 WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability 0.3%
- CVE-2026-115614 WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability 0.2%
- CVE-2026-114192 WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability 0.2%
- CVE-2026-112825 WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability 0.3%
- CVE-2026-111849 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability 0.3%
- CVE-2026-112824 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability 0.3%
- CVE-2026-103350 WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability 0.2%
- CVE-2026-107425 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability 0.3%
- CVE-2026-95589 WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability 0.2%
- CVE-2026-103351 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability 0.2%
- CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability 0.2%
- CVE-2026-93928 WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability 0.4%
- CVE-2026-81802 WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability 0.3%
- CVE-2026-85303 WordPress Booking and Rental Manager plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-81761 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-81759 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-78258 WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability 0.3%
- CVE-2026-45441 WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability 0.3%
- CVE-2026-27089 WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability 0.3%
- CVE-2024-32110 WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2026-25426 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerability 0.2%
- CVE-2026-25444 WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability 0.2%
- CVE-2026-27331 WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability 0.2%
- CVE-2026-27405 WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability 0.3%
- CVE-2025-66105 WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.8 - Broken Access Control vulnerability 0.2%
- CVE-2026-28040 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability 0.2%