Log in Start free

magepeopleteam

Products

ProductCVEsExploitedLatest
Booking and Rental Manager16–Oct 30, 2026
WpEvently13–Mar 25, 2026
Taxi Booking Manager for WooCommerce5–Aug 19, 2026
Bus Ticket Booking with Seat Reservation5–Oct 1, 2026
WpTravelly4–Apr 8, 2026
WpBookingly3–Aug 13, 2026
Car Rental Manager3–Aug 13, 2026
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar2–Oct 28, 2026
Travelly – Tour & Travel Booking Manager for WooCommerce2–Oct 28, 2026
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution1–May 29, 2024
E-cab Taxi Booking Manager for Woocommerce1–Aug 16, 2025
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment1–Jan 11, 2025
Event Booking Manager for WooCommerce1–Jun 7, 2025
Multipurpose Ticket Booking Manager1–Oct 6, 2024
Deposits and Partial Payments for WooCommerce1–Sep 11, 2026

Exploited and recent CVEs

  • CVE-2026-54850 Medium 6.5 WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability 0.4%
  • CVE-2026-111213 Medium 4.3 Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter 0.2%
  • CVE-2026-109590 Medium 6.4 Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes 0.2%
  • CVE-2026-109381 High 7.2 Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter 0.4%
  • CVE-2026-97251 Medium 6.5 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-27378 Medium 5.3 WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-81762 Medium 6.5 WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-78257 High 8.8 WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-73363 Medium 6.5 WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability 0.3%
  • CVE-2026-66687 Medium 6.5 WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27380 High 7.2 WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-27345 High 7.5 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability 0.3%
  • CVE-2026-17166 Medium 4.3 Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action 0.4%
  • CVE-2026-59532 High 7.5 WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability 0.4%
  • CVE-2026-61985 Medium 5.3 WordPress Car Rental Manager plugin <= 1.3.7 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57404 Medium 6.5 WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57660 Medium 5.3 WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-39572 Medium 4.3 WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-39565 Medium 4.3 WordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerability 0.2%
  • CVE-2026-27095 Critical 9.8 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-25361 High 7.1 WordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-23972 Medium 6.5 WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-32384 High 7.5 WordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability 0.4%
  • CVE-2026-32354 Medium 5.3 WordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-69328 High 8.8 WordPress Booking and Rental Manager plugin <= 2.5.9 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-23549 Critical 9.8 WordPress WpEvently plugin <= 5.1.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-24954 High 8.8 WordPress WpEvently plugin <= 5.0.8 - Deserialization of untrusted data vulnerability 0.4%
  • CVE-2026-24942 Medium 4.3 WordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-69327 Medium 4.3 WordPress Car Rental Manager plugin <= 1.0.9 - Broken Access Control vulnerability 0.3%
  • CVE-2025-64266 High 8.8 WordPress Booking and Rental Manager plugin <= 2.5.4 - PHP Object Injection vulnerability 0.4%