Medium · 4.3 CVE-2024-49294 EUVD-2024-43703GHSA-mqc6-fvr2-5xfx

WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Published Jan 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: MagePeople Team Product: Bus Ticket Booking with Seat Reservation

Description

Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through <= 5.4.3.

Affected products

Vendor	Product	Affected	Fixed
magepeopleteam	Bus Ticket Booking with Seat Reservation	≤ 5.4.3	—

References

https://patchstack.com/database/Wordpress/Plugin/bus-ticket-booking-with-seat-reservation/vulnerability/wordpress-wpbusticketly-plugin-5-4-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry