Magepeopleteam vulnerabilities
Published CVEs affecting Magepeopleteam products: 29 record(s), with severity, exploitation and fixes.
Booking and Rental Manager 9WpEvently 7Bus Ticket Booking with Seat Reservation 3Car Rental Manager 3WpBookingly 2Taxi Booking Manager for WooCommerce 2WpTravelly 1Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar 1Deposits and Partial Payments for WooCommerce 1
CVE-2025-64266
High · 8.8
CWE-502 Dec 18, 2025
WordPress Booking and Rental Manager plugin <= 2.5.4 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.4.
CVE-2025-66083
Medium · 5.3
CWE-862 Nov 21, 2025
WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4.
CVE-2025-66082
Medium · 5.3
CWE-862 Nov 21, 2025
WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4.
CVE-2025-49904
High · 7.1
CWE-79 Nov 6, 2025
WordPress Booking and Rental Manager plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <= 2.5.3.