Vendor CVEs

Magepeople inc.

All CVEs

31 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-54713	Magepeople inc. Taxi Booking Manager for WooCommerce	Cri	0.64	9.8	0.01	Aug 20, 2025	Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.3.0.
CVE-2025-32607	Magepeople inc. WpBookingly	Cri	0.64	9.8	0.01	Apr 11, 2025	Deserialization of Untrusted Data vulnerability in magepeopleteam WpBookingly service-booking-manager allows Object Injection.This issue affects WpBookingly: from n/a through <= 1.3.0.
CVE-2025-69328	Magepeople inc. Booking and Rental Manager	Hig	0.57	8.8	0.00	Feb 20, 2026	Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.9.
CVE-2025-64266	Magepeople inc. Booking and Rental Manager	Hig	0.57	8.8	0.00	Dec 18, 2025	Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.4.
CVE-2025-30892	Magepeople inc. WpTravelly	Hig	0.57	8.8	0.01	Apr 1, 2025	Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Object Injection.This issue affects WpTravelly: from n/a through <= 1.8.7.
CVE-2025-30891	Magepeople inc. WpTravelly	Hig	0.57	8.8	0.01	Mar 27, 2025	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through <= 1.8.7.
CVE-2025-26921	Magepeople inc. Booking and Rental Manager	Hig	0.57	8.8	0.00	Mar 15, 2025	Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.2.6.
CVE-2025-24661	Magepeople inc. Taxi Booking Manager for WooCommerce	Hig	0.57	8.8	0.01	Feb 3, 2025	Deserialization of Untrusted Data vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Object Injection.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.1.8.
CVE-2026-32384	Magepeople inc. WpBookingly	Hig	0.49	7.5	0.00	Mar 13, 2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpBookingly service-booking-manager allows PHP Local File Inclusion.This issue affects WpBookingly: from n/a through <= 1.2.9.
CVE-2025-27011	Magepeople inc. Taxi Booking Manager for WooCommerce	Hig	0.49	7.5	0.01	Apr 15, 2025	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows PHP Local File Inclusion.This issue affects Booking and Rental…
CVE-2024-43212	Magepeople inc. WpTravelly	Hig	0.49	7.5	0.01	Nov 1, 2024	Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7.
CVE-2025-49904	Magepeople inc. Booking and Rental Manager	Hig	0.46	7.1	0.00	Nov 6, 2025	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <=…
CVE-2026-27405	Magepeople inc. WpBookingly	Med	0.42	6.5	0.00	May 20, 2026	Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.
CVE-2026-28040	Magepeople inc. Taxi Booking Manager for WooCommerce	Med	0.42	6.5	0.00	Apr 23, 2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.0.
CVE-2026-23972	Magepeople inc. Booking and Rental Manager	Med	0.42	6.5	0.00	Mar 25, 2026	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.0.
CVE-2025-47585	Magepeople inc. Taxi Booking Manager for WooCommerce	Med	0.42	6.5	0.00	Jun 2, 2025	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.8.
CVE-2026-27331	Magepeople inc. WpTravelly	Med	0.41	6.3	0.00	May 26, 2026	Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a through 2.1.5.
CVE-2025-22720	Magepeople inc. Booking and Rental Manager	Med	0.38	5.8	0.00	Jan 31, 2025	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.1.
CVE-2024-44037	Magepeople inc. Multipurpose Ticket Booking Manager	Med	0.38	5.9	0.00	Oct 6, 2024	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Multipurpose Ticket Booking Manager bus-booking-manager allows Stored XSS.This issue affects Multipurpose Ticket Booking Manager: from n/a through <= 4.2.2.
CVE-2026-25426	Magepeople inc. Taxi Booking Manager for WooCommerce	Med	0.34	5.3	0.00	May 26, 2026	Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.1.
CVE-2025-39390	Magepeople inc. Booking and Rental Manager	Med	0.34	5.3	0.00	Apr 24, 2025	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.6.
CVE-2025-39457	Magepeople inc. Booking and Rental Manager	Med	0.34	5.3	0.00	Apr 17, 2025	Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8.
CVE-2025-30839	Magepeople inc. Taxi Booking Manager for WooCommerce	Med	0.34	5.3	0.00	Mar 27, 2025	Missing Authorization vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.2.1.
CVE-2025-22737	Magepeople inc. WpTravelly	Med	0.34	5.3	0.00	Jan 15, 2025	Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through <= 1.8.5.
CVE-2024-0434	Magepeople inc. WpTravelly	Med	0.34	5.3	0.00	May 29, 2024	The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbm_new_place_save' function in all versions up to, and including, 1.7.1. This makes it…
CVE-2026-25444	Magepeople inc. WpBookingly	Med	0.28	4.3	0.00	May 26, 2026	Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.
CVE-2026-39565	Magepeople inc. WpTravelly	Med	0.28	4.3	0.00	Apr 8, 2026	Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through <= 2.1.7.
CVE-2024-32450	Magepeople inc. WpTravelly	Med	0.28	4.3	0.00	Apr 15, 2024	Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team WpTravelly.This issue affects WpTravelly: from n/a through 1.6.0.
CVE-2025-5568	WordPress Wpevently		0.00	—	0.00	Jun 7, 2025	The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
CVE-2024-43986	Magepeople inc. Taxi Booking Manager for WooCommerce		0.00	—	0.00	Aug 29, 2024	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9.
CVE-2024-43138	Magepeople inc. Taxi Booking Manager for WooCommerce		0.00	—	0.01	Aug 13, 2024	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1.

CVE-2025-54713CriAug 20, 2025
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.64cvss 9.8epss 0.01
Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.3.0.
CVE-2025-32607CriApr 11, 2025
Magepeople inc.
WpBookingly
risk 0.64cvss 9.8epss 0.01
Deserialization of Untrusted Data vulnerability in magepeopleteam WpBookingly service-booking-manager allows Object Injection.This issue affects WpBookingly: from n/a through <= 1.3.0.
CVE-2025-69328HigFeb 20, 2026
Magepeople inc.
Booking and Rental Manager
risk 0.57cvss 8.8epss 0.00
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.9.
CVE-2025-64266HigDec 18, 2025
Magepeople inc.
Booking and Rental Manager
risk 0.57cvss 8.8epss 0.00
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.4.
CVE-2025-30892HigApr 1, 2025
Magepeople inc.
WpTravelly
risk 0.57cvss 8.8epss 0.01
Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Object Injection.This issue affects WpTravelly: from n/a through <= 1.8.7.
CVE-2025-30891HigMar 27, 2025
Magepeople inc.
WpTravelly
risk 0.57cvss 8.8epss 0.01
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through <= 1.8.7.
CVE-2025-26921HigMar 15, 2025
Magepeople inc.
Booking and Rental Manager
risk 0.57cvss 8.8epss 0.00
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.2.6.
CVE-2025-24661HigFeb 3, 2025
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.57cvss 8.8epss 0.01
Deserialization of Untrusted Data vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Object Injection.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.1.8.
CVE-2026-32384HigMar 13, 2026
Magepeople inc.
WpBookingly
risk 0.49cvss 7.5epss 0.00
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpBookingly service-booking-manager allows PHP Local File Inclusion.This issue affects WpBookingly: from n/a through <= 1.2.9.
CVE-2025-27011HigApr 15, 2025
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.49cvss 7.5epss 0.01
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows PHP Local File Inclusion.This issue affects Booking and Rental…
CVE-2024-43212HigNov 1, 2024
Magepeople inc.
WpTravelly
risk 0.49cvss 7.5epss 0.01
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7.
CVE-2025-49904HigNov 6, 2025
Magepeople inc.
Booking and Rental Manager
risk 0.46cvss 7.1epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <=…
CVE-2026-27405MedMay 20, 2026
Magepeople inc.
WpBookingly
risk 0.42cvss 6.5epss 0.00
Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.
CVE-2026-28040MedApr 23, 2026
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.0.
CVE-2026-23972MedMar 25, 2026
Magepeople inc.
Booking and Rental Manager
risk 0.42cvss 6.5epss 0.00
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.0.
CVE-2025-47585MedJun 2, 2025
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.42cvss 6.5epss 0.00
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.8.
CVE-2026-27331MedMay 26, 2026
Magepeople inc.
WpTravelly
risk 0.41cvss 6.3epss 0.00
Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a through 2.1.5.
CVE-2025-22720MedJan 31, 2025
Magepeople inc.
Booking and Rental Manager
risk 0.38cvss 5.8epss 0.00
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.1.
CVE-2024-44037MedOct 6, 2024
Magepeople inc.
Multipurpose Ticket Booking Manager
risk 0.38cvss 5.9epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Multipurpose Ticket Booking Manager bus-booking-manager allows Stored XSS.This issue affects Multipurpose Ticket Booking Manager: from n/a through <= 4.2.2.
CVE-2026-25426MedMay 26, 2026
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.1.
CVE-2025-39390MedApr 24, 2025
Magepeople inc.
Booking and Rental Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.6.
CVE-2025-39457MedApr 17, 2025
Magepeople inc.
Booking and Rental Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8.
CVE-2025-30839MedMar 27, 2025
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.2.1.
CVE-2025-22737MedJan 15, 2025
Magepeople inc.
WpTravelly
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through <= 1.8.5.
CVE-2024-0434MedMay 29, 2024
Magepeople inc.
WpTravelly
risk 0.34cvss 5.3epss 0.00
The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbm_new_place_save' function in all versions up to, and including, 1.7.1. This makes it…
CVE-2026-25444MedMay 26, 2026
Magepeople inc.
WpBookingly
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.
CVE-2026-39565MedApr 8, 2026
Magepeople inc.
WpTravelly
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through <= 2.1.7.
CVE-2024-32450MedApr 15, 2024
Magepeople inc.
WpTravelly
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team WpTravelly.This issue affects WpTravelly: from n/a through 1.6.0.
CVE-2025-5568Jun 7, 2025
WordPress
Wpevently
risk 0.00cvss —epss 0.00
The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
CVE-2024-43986Aug 29, 2024
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.00cvss —epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9.
CVE-2024-43138Aug 13, 2024
Magepeople inc.
Taxi Booking Manager for WooCommerce
risk 0.00cvss —epss 0.01
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1.