Threat database

52 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.4%	CVE-2025-69328Booking and Rental Manager · Deserialization of Untrusted Data High8.8EPSS 0.4%2026-02-20CVE Database V5CVE-2025-69328 Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.9. EPSS 0.4%Vulnerability magepeopleteam	CVE Database V5	2026-02-20
Critical	9.8	EPSS 0.4%	CVE-2026-23549WpEvently · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-02-19CVE Database V5CVE-2026-23549 Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.1.1. EPSS 0.4%Vulnerability magepeopleteam	CVE Database V5	2026-02-19
High	8.8	EPSS 0.4%	CVE-2026-24954WpEvently · Deserialization of Untrusted Data High8.8EPSS 0.4%2026-02-03CVE Database V5CVE-2026-24954 Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.0.8. EPSS 0.4%Vulnerability magepeopleteam	CVE Database V5	2026-02-03
Medium	4.3	EPSS 0.1%	CVE-2026-24942WpEvently · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2026-02-03CVE Database V5CVE-2026-24942 Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through <= 5.1.1. EPSS 0.1%Vulnerability magepeopleteam	CVE Database V5	2026-02-03
Medium	4.3	EPSS 0.3%	CVE-2025-69327Car Rental Manager · Missing Authorization Medium4.3EPSS 0.3%2026-01-06CVE Database V5CVE-2025-69327 Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through <= 1.0.9. EPSS 0.3%Vulnerability magepeopleteam	CVE Database V5	2026-01-06
High	8.8	EPSS 0.4%	CVE-2025-64266Booking and Rental Manager · Deserialization of Untrusted Data High8.8EPSS 0.4%2025-12-18CVE Database V5CVE-2025-64266 Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.4. EPSS 0.4%Vulnerability magepeopleteam	CVE Database V5	2025-12-18
Medium	5.3	EPSS 0.3%	CVE-2025-66083WpEvently · Missing Authorization Medium5.3EPSS 0.3%2025-11-21CVE Database V5CVE-2025-66083 Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4. EPSS 0.3%Vulnerability magepeopleteam #cwe-862	CVE Database V5	2025-11-21
Medium	5.3	EPSS 0.3%	CVE-2025-66082WpEvently · Missing Authorization Medium5.3EPSS 0.3%2025-11-21CVE Database V5CVE-2025-66082 Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4. EPSS 0.3%Vulnerability magepeopleteam #cwe-862	CVE Database V5	2025-11-21
High	7.1	EPSS 0.2%	CVE-2025-49904Booking and Rental Manager · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in magepeopleteam… High7.1EPSS 0.2%2025-11-06CVE Database V5CVE-2025-49904 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Reflected XSS.This issue affects Booking and Rental Manager: from n/a through <= 2.5.3. EPSS 0.2%Vulnerability magepeopleteam	CVE Database V5	2025-11-06
High	8.8	EPSS 0.4%	CVE-2025-54742WpEvently · Deserialization of Untrusted Data High8.8EPSS 0.4%2025-08-28CVE Database V5CVE-2025-54742 Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 4.4.8. EPSS 0.4%Vulnerability magepeopleteam #cwe-502	CVE Database V5	2025-08-28
Critical	9.8	EPSS 0.6%	CVE-2025-54713Taxi Booking Manager for WooCommerce · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.6%2025-08-20CVE Database V5CVE-2025-54713 Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.3.0. EPSS 0.6%Vulnerability magepeopleteam	CVE Database V5	2025-08-20
Critical	9.8	EPSS 0.5%	CVE-2025-8898E-cab Taxi Booking Manager for Woocommerce · Missing Authorization Critical9.8EPSS 0.5%2025-08-16CVE Database V5CVE-2025-8898 The Taxi Booking Manager for Woocommerce \| E-cab plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.0. This is due to the plugin not properly validating a user's capabilities prior to updating a plugin setting or their identity prior to updating their details like email address. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. CVE-2025-54713 is likely a duplicate of this issue. EPSS 0.5%Vulnerability magepeopleteam #cwe-862	CVE Database V5	2025-08-16
Medium	4.3	EPSS 0.3%	CVE-2025-54705WpEvently · Missing Authorization Medium4.3EPSS 0.3%2025-08-14CVE Database V5CVE-2025-54705 Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 4.4.6. EPSS 0.3%Vulnerability magepeopleteam	CVE Database V5	2025-08-14
Medium	6.4	EPSS 0.3%	CVE-2025-5568Event Booking Manager for WooCommerce · Cross-site Scripting Medium6.4EPSS 0.3%2025-06-07CVE Database V5CVE-2025-5568 The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability magepeopleteam #cwe-79	CVE Database V5	2025-06-07
Medium	6.5	EPSS 0.3%	CVE-2025-47585Booking and Rental Manager · Missing Authorization Medium6.5EPSS 0.3%2025-06-02CVE Database V5CVE-2025-47585 Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through <= 2.3.8. EPSS 0.3%Vulnerability magepeopleteam	CVE Database V5	2025-06-02
Medium	5.3	EPSS 0.3%	CVE-2025-39457Booking and Rental Manager · Missing Authorization Medium5.3EPSS 0.3%2025-04-17CVE Database V5CVE-2025-39457 Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8. EPSS 0.3%Vulnerability magepeopleteam	CVE Database V5	2025-04-17
High	7.5	EPSS 0.7%	CVE-2025-27011Booking and Rental Manager · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.7%2025-04-15CVE Database V5CVE-2025-27011 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows PHP Local File Inclusion.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8. EPSS 0.7%Vulnerability magepeopleteam	CVE Database V5	2025-04-15
Critical	9.8	EPSS 0.9%	CVE-2025-32607WpBookingly · Deserialization of Untrusted Data Critical9.8EPSS 0.9%2025-04-11CVE Database V5CVE-2025-32607 Deserialization of Untrusted Data vulnerability in magepeopleteam WpBookingly service-booking-manager allows Object Injection.This issue affects WpBookingly: from n/a through <= 1.3.0. EPSS 0.9%Vulnerability magepeopleteam	CVE Database V5	2025-04-11
High	8.8	EPSS 0.5%	CVE-2025-32145WpEvently · Deserialization of Untrusted Data High8.8EPSS 0.5%2025-04-10CVE Database V5CVE-2025-32145 Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 4.3.6. EPSS 0.5%Vulnerability magepeopleteam	CVE Database V5	2025-04-10
High	8.8	EPSS 0.7%	CVE-2025-30892WpTravelly · Deserialization of Untrusted Data High8.8EPSS 0.7%2025-04-01CVE Database V5CVE-2025-30892 Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Object Injection.This issue affects WpTravelly: from n/a through <= 1.8.7. EPSS 0.7%Vulnerability magepeopleteam	CVE Database V5	2025-04-01

Showing 21–40 of 52 results