Threat database

5 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.6%	CVE-2024-43212WpTravelly · Missing Authorization High7.5EPSS 0.6%2024-11-01CVE Database V5CVE-2024-43212 Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7. EPSS 0.6%Vulnerability MagePeople Team #cwe-862	CVE Database V5	2024-11-01
Medium	5.9	EPSS 0.3%	CVE-2024-43985Bus Ticket Booking with Seat Reservation · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.9EPSS 0.3%2024-09-17CVE Database V5CVE-2024-43985 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5. EPSS 0.3%Vulnerability MagePeople Team #cwe-79	CVE Database V5	2024-09-17
Medium	5.9	EPSS 0.3%	CVE-2024-43986Taxi Booking Manager for WooCommerce · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.9EPSS 0.3%2024-08-29CVE Database V5CVE-2024-43986 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9. EPSS 0.3%Vulnerability MagePeople Team #cwe-79	CVE Database V5	2024-08-29
Medium	6.5	EPSS 0.6%	CVE-2024-43138Event Manager for WooCommerce · Path Traversal Medium6.5EPSS 0.6%2024-08-13CVE Database V5CVE-2024-43138 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1. EPSS 0.6%Vulnerability MagePeople Team #cwe-22	CVE Database V5	2024-08-13
Medium	4.3	EPSS 0.2%	CVE-2024-32450WpTravelly · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-04-15CVE Database V5CVE-2024-32450 Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team WpTravelly.This issue affects WpTravelly: from n/a through 1.6.0. EPSS 0.2%Vulnerability MagePeople Team #cwe-352	CVE Database V5	2024-04-15

Showing 1–5 of 5 results