Advisories · Technology

magepeopleteam Bus Ticket Booking with Seat Reservation.

Every CVE that names magepeopleteam Bus Ticket Booking with Seat Reservation among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97251 CVE record

CVSS 6.5 Medium

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability
- magepeopleteam Bus Ticket Booking with Seat Reservation
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-39572 CVE record

CVSS 4.3 Medium

WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability
- magepeopleteam Bus Ticket Booking with Seat Reservation
- Information disclosure
Not analysed yet 8 Apr 2026
CVE-2026-27095 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability
- magepeopleteam Bus Ticket Booking with Seat Reservation
- Insecure deserialization
Not analysed yet 25 Mar 2026
CVE-2024-49294 CVE record

CVSS 4.3 Medium

WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability
- magepeopleteam Bus Ticket Booking with Seat Reservation
- Cross-site request forgery (CSRF)
Not analysed yet 7 Jan 2025
CVE-2023-4067 CVE record

CVSS 6.1 Medium

Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting
- magepeopleteam Bus Ticket Booking with Seat Reservation
- Cross-site scripting (XSS)
Not analysed yet 2 Aug 2023