Magepeople inc. has 13 CVEs on record. Disclosure cadence is accelerating: 13 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 11. The median CVSS is 5.4 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-862 (8). Most affected products: mage-eventpress (3), booking-and-rental-manager-for-woocommerce (2), bus-ticket-booking-with-seat-reservation (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 13 prev 0
Weakness classes
Products
- mage-eventpress 3
- booking-and-rental-manager-for-woocommerce 2
- bus-ticket-booking-with-seat-reservation 2
- ecab-taxi-booking-manager 2
- tour-booking-manager 2
- advanced-partial-payment-or-deposit-for-woocommerce 1
Worst active — by depth score
CVE-2026-93928High· 7.3Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc40CVE-2026-114192Medium· 6.5WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability36CVE-2026-112825Medium· 6.5WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability36CVE-2026-107425Medium· 6.5Missing Authorization vulnerability in Magepeople inc36CVE-2026-95589Medium· 6.5Missing Authorization vulnerability in Magepeople inc36
Magepeople inc. vulnerabilities
CVEs affecting Magepeople inc., newest first. Open any entry for full detail, references, and exploit status.
13 CVEsRSS
CVE-2026-116394Medium· 5.3WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc. WpEvently mage-eventpress allows Code Injection.This issue affects WpEvently: from n/a through 5.7.9.
CVE-2026-115614Medium· 5.3WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Ma…
CVE-2026-114192Medium· 6.5WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8.
CVE-2026-112825Medium· 6.5WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through 1.5.3.
CVE-2026-111849Medium· 5.3WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5.
CVE-2026-112824Medium· 5.3WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticke…
CVE-2026-103350Medium· 5.3Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important Client Functionality.This issue affects Booking and Renta…
CVE-2026-107425Medium· 6.5Missing Authorization vulnerability in Magepeople inc
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticke…
CVE-2026-95589Medium· 6.5Missing Authorization vulnerability in Magepeople inc
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…
CVE-2026-103351Medium· 5.3Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: fr…
CVE-2026-62063Medium· 5.4Missing Authorization vulnerability in Magepeople inc
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.
CVE-2026-93928High· 7.3Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc
Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.
CVE-2026-81802Medium· 6.5Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.
Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.