Vendor

Magepeople

31 known vulnerabilities.

Products

WpEvently 7 WpTravelly 6 Taxi Booking Manager for WooCommerce 6 Booking and Rental Manager 4 WpBookingly 3 Bus Ticket Booking with Seat Reservation 3 Car Rental Manager 1 Deposits and Partial Payments for WooCommerce 1

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 8.8

CVE-2026-120839

WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.

Magepeople WpTravelly

Nov 7, 2026
High 8.8

CVE-2026-120841

WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.

Magepeople WpTravelly

Nov 7, 2026
High 7.3

CVE-2026-93928

WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.

Magepeople Taxi Booking Manager for WooCommerce Web / CMS

Sep 22, 2026
High 7.5

CVE-2026-45441

WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability

Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.

Magepeople WpEvently

Jun 15, 2026
High 7.5

CVE-2026-27089

WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.

Magepeople WpTravelly

Jun 15, 2026