CVE-2026-27378WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product D Deposits and Partial Payments for WooCommerce Published 09/11/2026 Severity Medium CVE-2026-81762WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 08/31/2026 Severity Medium CVE-2026-78257WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 08/27/2026 Severity High CVE-2026-73363WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Taxi Booking Manager for WooCommerce Published 08/19/2026 Severity Medium CVE-2026-66687WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W WpBookingly Published 08/13/2026 Severity Medium CVE-2026-27380WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product C Car Rental Manager Published 08/13/2026 Severity High CVE-2026-27345WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Taxi Booking Manager for WooCommerce Published 08/13/2026 Severity High CVE-2026-17166Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action Exploitation status Not known exploited Fix Affected product E Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar Published 07/29/2026 Severity Medium CVE-2026-59532WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 07/27/2026 Severity High CVE-2026-61985WordPress Car Rental Manager plugin <= 1.3.7 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product C Car Rental Manager Published 07/13/2026 Severity Medium CVE-2026-57404WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 07/13/2026 Severity Medium CVE-2026-57660WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 06/26/2026 Severity Medium CVE-2026-39572WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product B Bus Ticket Booking with Seat Reservation Published 04/08/2026 Severity Medium CVE-2026-39565WordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product W WpTravelly Published 04/08/2026 Severity Medium CVE-2026-27095WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product B Bus Ticket Booking with Seat Reservation Published 03/25/2026 Severity Critical CVE-2026-25361WordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 03/25/2026 Severity High CVE-2026-23972WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 03/25/2026 Severity Medium CVE-2026-32384WordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product W WpBookingly Published 03/13/2026 Severity High CVE-2026-32354WordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 03/13/2026 Severity Medium CVE-2025-69328WordPress Booking and Rental Manager plugin <= 2.5.9 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 02/20/2026 Severity High CVE-2026-23549WordPress WpEvently plugin <= 5.1.1 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 02/19/2026 Severity Critical CVE-2026-24954WordPress WpEvently plugin <= 5.0.8 - Deserialization of untrusted data vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 02/03/2026 Severity High CVE-2026-24942WordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 02/03/2026 Severity Medium CVE-2025-69327WordPress Car Rental Manager plugin <= 1.0.9 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product C Car Rental Manager Published 01/06/2026 Severity Medium CVE-2025-64266WordPress Booking and Rental Manager plugin <= 2.5.4 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 12/18/2025 Severity High CVE-2025-66083WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 11/21/2025 Severity Medium CVE-2025-66082WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 11/21/2025 Severity Medium CVE-2025-49904WordPress Booking and Rental Manager plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 11/06/2025 Severity High CVE-2025-54742WordPress WpEvently Plugin <= 4.4.8 - PHP Object Injection Vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 08/28/2025 Severity High CVE-2025-54713WordPress Taxi Booking Manager for WooCommerce plugin <= 1.3.0 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product T Taxi Booking Manager for WooCommerce Published 08/20/2025 Severity Critical CVE-2025-8898Taxi Booking Manager for Woocommerce | E-cab <= 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation via Account Takeover Exploitation status Not known exploited Fix Affected product E E-cab Taxi Booking Manager for Woocommerce Published 08/16/2025 Severity Critical CVE-2025-54705WordPress WpEvently plugin <= 4.4.6 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 08/14/2025 Severity Medium CVE-2025-5568WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Event Booking Manager for WooCommerce Published 06/07/2025 Severity Medium CVE-2025-47585WordPress Booking and Rental Manager plugin <= 2.3.8 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 06/02/2025 Severity Medium CVE-2025-39390WordPress Booking and Rental Manager plugin <= 2.3.6 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 04/24/2025 Severity Medium CVE-2025-39457WordPress Booking and Rental Manager plugin <= 2.2.8 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 04/17/2025 Severity Medium CVE-2025-27011WordPress Booking and Rental Manager plugin <= 2.2.8 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 04/15/2025 Severity High CVE-2025-32607WordPress WpBookingly plugin <= 1.3.0 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product W WpBookingly Published 04/11/2025 Severity Critical CVE-2025-32145WordPress WpEvently plugin <= 4.3.6 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 04/10/2025 Severity High CVE-2025-30892WordPress WpTravelly Plugin <= 1.8.7 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product W WpTravelly Published 04/01/2025 Severity High CVE-2025-30895WordPress WpEvently Plugin <= 4.2.9 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 03/27/2025 Severity High CVE-2025-30891WordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product W WpTravelly Published 03/27/2025 Severity High CVE-2025-30887WordPress WpEvently Plugin <= 4.2.9 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 03/27/2025 Severity Medium CVE-2025-30839WordPress Taxi Booking Manager for WooCommerce plugin <= 1.2.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Taxi Booking Manager for WooCommerce Published 03/27/2025 Severity Medium CVE-2025-26921WordPress Booking and Rental Manager Plugin <= 2.2.6 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 03/15/2025 Severity High CVE-2025-24661WordPress Taxi Booking Manager for WooCommerce plugin <= 1.1.8 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product T Taxi Booking Manager for WooCommerce Published 02/03/2025 Severity High CVE-2025-22720WordPress WpRently | WordPress plugin plugin <= 2.2.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager Published 01/31/2025 Severity Medium CVE-2025-22737WordPress WpTravelly Plugin <= 1.8.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product W WpTravelly Published 01/15/2025 Severity Medium CVE-2024-12412Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix Affected product B Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment Published 01/11/2025 Severity Medium CVE-2024-49294WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product B Bus Ticket Booking with Seat Reservation Published 01/07/2025 Severity Medium CVE-2024-49703WordPress WpEvently plugin <= 4.2.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W WpEvently Published 10/24/2024 Severity Medium CVE-2024-44037WordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M Multipurpose Ticket Booking Manager Published 10/06/2024 Severity Medium CVE-2024-0434WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly <= 1.7.1 - Missing Authorization via ttbm_new_place_save Exploitation status Not known exploited Fix Affected product T Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution Published 05/29/2024 Severity Medium CVE-2023-4067Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix Affected product B Bus Ticket Booking with Seat Reservation Published 08/02/2023 Severity Medium 
