Medium · 5.3 CVE-2025-66105 EUVD-2025-209714GHSA-jwq4-hvc6-vpm4

WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.8 - Broken Access Control vulnerability

Published May 7, 2026 · Updated May 7, 2026 · Assigned by Patchstack

Vendor: Magepeople Product: Bus Ticket Booking with Seat Reservation

Description

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Bus Ticket Booking with Seat Reservation: from n/a before 5.6.8.

Affected products

Vendor	Product	Affected	Fixed
Magepeople	Bus Ticket Booking with Seat Reservation	< 5.6.8	5.6.8

References

https://patchstack.com/database/wordpress/plugin/bus-ticket-booking-with-seat-reservation/vulnerability/wordpress-bus-ticket-booking-with-seat-reservation-plugin-5-6-8-broken-access-control-vulnerability?_s_id=cve vdb-entry