SecAlerts
m

magepeople

Security Risk Profile

32
/100
low

Security Risk Score

Comprehensive risk assessment based on 15 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from June 23, 2023 to present

15
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched

Threat Assessment

Avg CVSS
5.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
32/100
low
🆕 2Fresh (<7d)📈 6 in Last 30 Days

Severity Distribution

Critical
0
High
2
Medium
12
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
CSRF
2
2
XSS
1

Most Affected Products

1. MagePeople WpTravelly4
2. MagePeople Taxi Booking Manager for WooCommerce3
3. MagePeople Bus Ticket Booking with Seat Reservation2
4. MagePeople WpBookingly2
5. MagePeople Deposits and Partial Payments for WooCommerce1

Recent Vulnerabilities

See more →
CVE-2026-107425
CVSS 6.5medium

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability

Oct 14, 2026🔧 No Patch
CVE-2026-95589
CVSS 6.5medium

WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability

Oct 9, 2026🔧 No Patch
CVE-2026-103351
CVSS 5.3medium

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability

Oct 5, 2026🔧 No Patch
CVE-2026-62063
CVSS 5.4medium

WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability

Oct 1, 2026🔧 No Patch
CVE-2026-91077
CVSS 2.7low

Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_list

Sep 23, 2026🔧 No Patch
CVE-2026-93928
CVSS 7.3EPSS 0%high

WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability

Sep 22, 2026🔧 No Patch
CVE-2024-32110
CVSS 4.3medium

WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Jun 11, 2026🔧 No Patch
CVE-2026-25426
CVSS 5.3medium

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerability

May 26, 2026🔧 No Patch
CVE-2026-25444
CVSS 4.3medium

WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability

May 26, 2026🔧 No Patch
CVE-2026-27331
CVSS 6.3medium

WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability

May 26, 2026🔧 No Patch

Monitor magepeople in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

magepeople Security Vulnerabilities & Risk Score | 15 CVEs | SecAlerts - SecAlerts