PatchTheCVE: mage-peoplehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-5568: The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in allhttps://patchthecve.com/cve/CVE-2025-5568.htmlhttps://patchthecve.com/cve/CVE-2025-5568.htmlWed, 17 Jun 2026 09:48:11 +0000MEDIUM 6.4: The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above,CVE-2024-43985: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mhttps://patchthecve.com/cve/CVE-2024-43985.htmlhttps://patchthecve.com/cve/CVE-2024-43985.htmlWed, 17 Jun 2026 07:52:06 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5.CVE-2024-43986: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mhttps://patchthecve.com/cve/CVE-2024-43986.htmlhttps://patchthecve.com/cve/CVE-2024-43986.htmlWed, 17 Jun 2026 07:52:06 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Stored XSS.This issue affects Taxi Booking Manager for WooCommerce: through 1.0.9.CVE-2024-43138: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Teahttps://patchthecve.com/cve/CVE-2024-43138.htmlhttps://patchthecve.com/cve/CVE-2024-43138.htmlWed, 17 Jun 2026 07:50:30 +0000MEDIUM 6.5: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1.CVE-2024-24796: Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin fohttps://patchthecve.com/cve/CVE-2024-24796.htmlhttps://patchthecve.com/cve/CVE-2024-24796.htmlWed, 17 Jun 2026 07:14:52 +0000HIGH 8.2: Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1.