Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment

Information

Software Type Plugin
Software Slug booking-and-rental-manager-for-woocommerce (view on wordpress.org)
Software Status Active
Software Author magepeopleteam
Software Website mage-people.com
Software Downloads 76,935
Software Active Installs 1,000
Software Record Last Updated October 16, 2026

19 Vulnerabilities

Submit a Vulnerability
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-85303
Sep 3, 2026
Researcher: sungbyeongchan
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.6 - Missing Authorization
4.3
CVE-2026-81762
Aug 28, 2026
Researcher: sungbyeongchan
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.5 - Authenticated (Contributor+) PHP Object Injection
7.5
CVE-2026-78257
Aug 25, 2026
Researcher: daroo
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.5 - Missing Authorization
5.3
CVE-2026-78258
Aug 24, 2026
Researcher: Bao
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.2 - Unauthenticated Price Maniputlation
5.3
CVE-2026-59532
Jul 23, 2026
Researcher: dodoh4t
Booking and Rental Manager <= 2.6.9 - Missing Authorization
5.3
CVE-2026-57404
Jul 8, 2026
Researcher: hhhai
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization
5.3
CVE-2026-57660
Jun 26, 2026
Researcher: Averon Averenkov
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.6.0 - Missing Authorization
4.3
CVE-2026-23972
Mar 23, 2026
Researcher: PPzzAArr
Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection
7.5
CVE-2025-69328
Feb 9, 2026
Researcher: Phat RiO
Booking and Rental Manager <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2025-49904
Nov 1, 2025
Researcher: Ryan Novotny
Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection
7.5
CVE-2025-64266
Sep 20, 2025
Researcher: Muhammad Yudha - DJ
Booking and Rental Manager <= 2.3.8 - Missing Authorization
5.3
CVE-2025-47585
May 22, 2025
Researcher: ghsinfosec
Booking and Rental Manager <= 2.3.6 - Missing Authorization
5.3
CVE-2025-39390
Apr 18, 2025
Researcher: LVT-tholv2k
Booking and Rental Manager <= 2.2.8 - Missing Authorization
5.3
CVE-2025-39457
Apr 17, 2025
Researcher: LVT-tholv2k
Booking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2025-27011
Apr 11, 2025
Researcher: LVT-tholv2k
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection
8.8
CVE-2025-26921
Feb 23, 2025
Researcher: LVT-tholv2k
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization
5.3
CVE-2025-22720
Jan 15, 2025
Researcher: Kévin Mosbahi (Mika)
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-12412
Jan 10, 2025
Researcher: vgo0
Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-35048
Jun 13, 2023
Researcher: NeginNrb
Title Status CVE ID CVSS Researchers Date
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2026-85303 6.4 sungbyeongchan September 3, 2026
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.6 - Missing Authorization Patched CVE-2026-81762 4.3 sungbyeongchan August 28, 2026
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.5 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2026-78257 7.5 daroo August 25, 2026
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.5 - Missing Authorization Patched CVE-2026-78258 5.3 Bao August 24, 2026
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.2 - Unauthenticated Price Maniputlation Patched CVE-2026-59532 5.3 dodoh4t July 23, 2026
Booking and Rental Manager <= 2.6.9 - Missing Authorization Patched CVE-2026-57404 5.3 hhhai July 8, 2026
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization Patched CVE-2026-57660 5.3 Averon Averenkov June 26, 2026
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.6.0 - Missing Authorization Patched CVE-2026-23972 4.3 PPzzAArr March 23, 2026
Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2025-69328 7.5 Phat RiO February 9, 2026
Booking and Rental Manager <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2025-49904 7.2 Ryan Novotny November 1, 2025
Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2025-64266 7.5 Muhammad Yudha - DJ September 20, 2025
Booking and Rental Manager <= 2.3.8 - Missing Authorization Patched CVE-2025-47585 5.3 ghsinfosec May 22, 2025
Booking and Rental Manager <= 2.3.6 - Missing Authorization Patched CVE-2025-39390 5.3 LVT-tholv2k April 18, 2025
Booking and Rental Manager <= 2.2.8 - Missing Authorization Patched CVE-2025-39457 5.3 LVT-tholv2k April 17, 2025
Booking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-27011 8.8 LVT-tholv2k April 11, 2025
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2025-26921 8.8 LVT-tholv2k February 23, 2025
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization Patched CVE-2025-22720 5.3 Kévin Mosbahi (Mika) January 15, 2025
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting Patched CVE-2024-12412 6.1 vgo0 January 10, 2025
Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2023-35048 4.4 NeginNrb June 13, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation