Advisories · Technology

magepeopleteam Booking and Rental Manager.

Every CVE that names magepeopleteam Booking and Rental Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54850 CVE record

CVSS 6.5 Medium

WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-81762 CVE record

CVSS 6.5 Medium

WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 31 Aug 2026
CVE-2026-78257 CVE record

CVSS 8.8 High

WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability
- magepeopleteam Booking and Rental Manager
- Insecure deserialization
Not analysed yet 27 Aug 2026
CVE-2026-59532 CVE record

CVSS 7.5 High

WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability
- magepeopleteam Booking and Rental Manager
- CWE-1284
Not analysed yet 27 Jul 2026
CVE-2026-57404 CVE record

CVSS 6.5 Medium

WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 13 Jul 2026
CVE-2026-57660 CVE record

CVSS 5.3 Medium

WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-23972 CVE record

CVSS 6.5 Medium

WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2025-69328 CVE record

CVSS 8.8 High

WordPress Booking and Rental Manager plugin <= 2.5.9 - PHP Object Injection vulnerability
- magepeopleteam Booking and Rental Manager
- Insecure deserialization
Not analysed yet 20 Feb 2026
CVE-2025-64266 CVE record

CVSS 8.8 High

WordPress Booking and Rental Manager plugin <= 2.5.4 - PHP Object Injection vulnerability
- magepeopleteam Booking and Rental Manager
- Insecure deserialization
Not analysed yet 18 Dec 2025
CVE-2025-49904 CVE record

CVSS 7.1 High

WordPress Booking and Rental Manager plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability
- magepeopleteam Booking and Rental Manager
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2025
CVE-2025-47585 CVE record

CVSS 6.5 Medium

WordPress Booking and Rental Manager plugin <= 2.3.8 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 2 Jun 2025
CVE-2025-39390 CVE record

CVSS 5.3 Medium

WordPress Booking and Rental Manager plugin <= 2.3.6 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 24 Apr 2025
CVE-2025-39457 CVE record

CVSS 5.3 Medium

WordPress Booking and Rental Manager plugin <= 2.2.8 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 17 Apr 2025
CVE-2025-27011 CVE record

CVSS 7.5 High

WordPress Booking and Rental Manager plugin <= 2.2.8 - Local File Inclusion vulnerability
- magepeopleteam Booking and Rental Manager
- File inclusion
Not analysed yet 15 Apr 2025
CVE-2025-26921 CVE record

CVSS 8.8 High

WordPress Booking and Rental Manager Plugin <= 2.2.6 - PHP Object Injection vulnerability
- magepeopleteam Booking and Rental Manager
- Insecure deserialization
Not analysed yet 15 Mar 2025
CVE-2025-22720 CVE record

CVSS 5.8 Medium

WordPress WpRently | WordPress plugin plugin <= 2.2.1 - Broken Access Control vulnerability
- magepeopleteam Booking and Rental Manager
- Broken access control
Not analysed yet 31 Jan 2025