CVE-2026-107425
CVE-2026-107425 · WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7.
CVSS 6.5 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
bus ticket booking with seat reservation
- Versions
- ≥ 0, ≤ 5.9.7: Affected; ≥ 5.9.8: Not affected (custom)
Update to 5.9.8