Approved changes feed: RSS · Atom

cpe:2.3:a:magepeopleteam:booking_and_rental_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMagepeopleteam (0363484c-2251-5ffb-a8d9-1a438f007334)
ProductBooking And Rental Manager (29317933-c9be-54f2-8290-9f234fc6438e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57660 vulnerable 2026-07-29 01:03:15.852776 WordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability
MEDIUM (5.3)
Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions.
Published: 2026-06-26T14:53:28.130Z
Updated: 2026-06-29T13:44:33.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57404 vulnerable 2026-07-29 01:00:29.740322 WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.9.
Published: 2026-07-13T08:41:24.223Z
Updated: 2026-07-13T16:07:52.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23972 vulnerable 2026-06-08 07:51:16.483526 WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.6.0.
Published: 2026-03-25T16:14:30.153Z
Updated: 2026-04-28T16:14:47.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-69328 vulnerable 2026-06-08 07:43:13.433008 WordPress Booking and Rental Manager plugin <= 2.5.9 - PHP Object Injection vulnerability
HIGH (8.8)
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.9.
Published: 2026-02-20T15:46:49.714Z
Updated: 2026-04-28T20:52:57.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64266 vulnerable 2026-06-08 07:39:18.298079 WordPress Booking and Rental Manager plugin <= 2.5.4 - PHP Object Injection vulnerability
HIGH (8.8)
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through <= 2.5.4.
Published: 2025-12-18T07:22:14.481Z
Updated: 2026-04-28T18:28:35.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49904 vulnerable 2026-06-08 07:29:15.084588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47585 vulnerable 2026-06-08 07:27:14.588575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39457 vulnerable 2026-06-08 07:23:06.593493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39390 vulnerable 2026-06-08 07:23:06.495762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27011 vulnerable 2026-06-08 07:14:50.814067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26921 vulnerable 2026-06-08 07:14:50.676433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22720 vulnerable 2026-06-08 07:10:54.673851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.