Magepeopleteam Bus Ticket Booking With Seat Reservation vulnerabilities

CVE-2026-27095 [CRITICAL] CWE-502 CVE-2026-27095: Deserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket Booking with Seat Reser Deserialization of Untrusted Data vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Object Injection.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through <= 5.6.0.

CVE-2023-4067 [MEDIUM] CWE-79 CVE-2023-4067: The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-S The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_date' and 'tab_date_r' parameters in versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages

CVE-2026-39572 [MEDIUM] CWE-497 CVE-2026-39572: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeop Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through < 5.6.5.

CVE-2024-49294 [MEDIUM] CWE-352 CVE-2024-49294: Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam Bus Ticket Booking with Seat Reser Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through <= 5.4.3.