Skip to content
OpenAdvisories

Vendor

Magepeople

31 known vulnerabilities.

Magepeople at a glance

Last 12 months
31
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 5 vulnerabilities June 2026: 3 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 3 vulnerabilities September 2026: 3 vulnerabilities Sep October 2026: 12 vulnerabilities November 2026: 4 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202640
Oct 2026120
Sep 202630
Aug 202630
Jul 202600
Jun 202630
May 202650
Apr 202610
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

WpEvently 7 WpTravelly 6 Taxi Booking Manager for WooCommerce 6 Booking and Rental Manager 4 WpBookingly 3 Bus Ticket Booking with Seat Reservation 3 Car Rental Manager 1 Deposits and Partial Payments for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Medium 5.3
    CVE-2026-124261

    WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a thr…

    Magepeople Taxi Booking Manager for WooCommerce Web / CMS
  • High 8.8
    CVE-2026-120839

    WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.

    Magepeople WpTravelly
  • High 8.8
    CVE-2026-120841

    WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.

    Magepeople WpTravelly
  • Medium 6.5
    CVE-2026-121784

    WordPress WpBookingly plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. WpBookingly service-booking-manager allows Stored XSS.This issue affects WpBookingly: from n/a through 1.4.3.

    Magepeople WpBookingly
  • Medium 5.3
    CVE-2026-114181

    WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a thr…

    Magepeople Taxi Booking Manager for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-116394

    WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc. WpEvently mage-eventpress allows Code Injection.This issue affects WpEvently: from n/a through 5.7.9.

    Magepeople WpEvently
  • Medium 5.3
    CVE-2026-115614

    WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a throug…

    Magepeople Booking and Rental Manager
  • Medium 6.5
    CVE-2026-114192

    WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8.

    Magepeople WpEvently
  • Medium 6.5
    CVE-2026-112825

    WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through 1.5.3.

    Magepeople Car Rental Manager
  • Medium 5.3
    CVE-2026-111849

    WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5.

    Magepeople WpTravelly
  • Medium 5.3
    CVE-2026-112824

    WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Re…

    Magepeople Bus Ticket Booking with Seat Reservation
  • Medium 5.3
    CVE-2026-103350

    WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability

    Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important Client Functionality.This issue affects Booking and Rental Manager: from n/a th…

    Magepeople Booking and Rental Manager
  • Medium 6.5
    CVE-2026-107425

    WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Re…

    Magepeople Bus Ticket Booking with Seat Reservation
  • Medium 6.5
    CVE-2026-95589

    WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Pa…

    Magepeople Deposits and Partial Payments for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-103351

    WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability

    Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1.

    Magepeople Taxi Booking Manager for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2026-62063

    WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.

    Magepeople WpTravelly
  • High 7.3
    CVE-2026-93928

    WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.

    Magepeople Taxi Booking Manager for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2026-81802

    WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.

    Magepeople WpEvently
  • Medium 6.5
    CVE-2026-85303

    WordPress Booking and Rental Manager plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Booking and Rental Manager allows Stored XSS. This issue affects Booking and Rental Manager: from n/a through 2.7.7.

    Magepeople Booking and Rental Manager
  • Medium 4.3
    CVE-2026-81761

    WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

    Subscriber Broken Access Control in WpEvently <= 5.5.0 versions.

    Magepeople WpEvently
  • Medium 5.4
    CVE-2026-81759

    WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

    Contributor Broken Access Control in WpEvently <= 5.5.0 versions.

    Magepeople WpEvently
  • Medium 5.3
    CVE-2026-78258

    WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.

    Magepeople Booking and Rental Manager
  • High 7.5
    CVE-2026-45441

    WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability

    Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.

    Magepeople WpEvently
  • High 7.5
    CVE-2026-27089

    WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability

    Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.

    Magepeople WpTravelly
  • Medium 4.3
    CVE-2024-32110

    WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery. This issue affects WpEvently: from n/a through 4.1.2.

    Magepeople WpEvently
  • Medium 5.3
    CVE-2026-25426

    WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.1.

    Magepeople Taxi Booking Manager for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2026-25444

    WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.

    Magepeople WpBookingly
  • Medium 6.3
    CVE-2026-27331

    WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a through 2.1.5.

    Magepeople WpTravelly
  • Medium 6.5
    CVE-2026-27405

    WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.

    Magepeople WpBookingly
  • Medium 5.3
    CVE-2025-66105

    WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bus Ticket Booking with Seat Reservation: from n/a before 5.6.8.

    Magepeople Bus Ticket Booking with Seat Reservation
  • Medium 6.5
    CVE-2026-28040

    WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.0.

    Magepeople Taxi Booking Manager for WooCommerce Web / CMS