CVE-2026-107425: WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Bus Ticket Booking with Seat Reservationto a version that resolves this vulnerability.Fixed in 5.9.8
Event History
Frequently Asked Questions
Which installations are affected?
MagePeople Bus Ticket Booking with Seat Reservation versions through 5.9.7 are affected. The available data does not identify a lower fixed or first affected version.
Does exploitation require an authenticated WordPress account or user interaction?
No. The vector is network-based, with low attack complexity, no privileges required, and no user interaction required.
What impact can successful exploitation have?
The issue can affect integrity and availability at a low level. No confidentiality impact is indicated by the provided vector.