Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment

Information

Software Type Plugin
Software Slug booking-and-rental-manager-for-woocommerce (view on wordpress.org)
Software Status Active
Software Author magepeopleteam
Software Website mage-people.com
Software Downloads 67,425
Software Active Installs 1,000
Software Record Last Updated July 16, 2026

13 Vulnerabilities

Submit a Vulnerability
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization
5.3
CVE-2026-57660
Jun 26, 2026
Researcher: Averon Averenkov
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.6.0 - Missing Authorization
4.3
CVE-2026-23972
Mar 23, 2026
Researcher: PPzzAArr
Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection
7.5
CVE-2025-69328
Feb 9, 2026
Researcher: Phat RiO
Booking and Rental Manager <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2025-49904
Nov 1, 2025
Researcher: Ryan Novotny
Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection
7.5
CVE-2025-64266
Sep 20, 2025
Researcher: Muhammad Yudha - DJ
Booking and Rental Manager <= 2.3.8 - Missing Authorization
5.3
CVE-2025-47585
May 22, 2025
Researcher: ghsinfosec
Booking and Rental Manager <= 2.3.6 - Missing Authorization
5.3
CVE-2025-39390
Apr 18, 2025
Researcher: LVT-tholv2k
Booking and Rental Manager <= 2.2.8 - Missing Authorization
5.3
CVE-2025-39457
Apr 17, 2025
Researcher: LVT-tholv2k
Booking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2025-27011
Apr 11, 2025
Researcher: LVT-tholv2k
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection
8.8
CVE-2025-26921
Feb 23, 2025
Researcher: LVT-tholv2k
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization
5.3
CVE-2025-22720
Jan 15, 2025
Researcher: Kévin Mosbahi (Mika)
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-12412
Jan 10, 2025
Researcher: vgo0
Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-35048
Jun 13, 2023
Researcher: NeginNrb
Title Status CVE ID CVSS Researchers Date
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization Patched CVE-2026-57660 5.3 Averon Averenkov June 26, 2026
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.6.0 - Missing Authorization Patched CVE-2026-23972 4.3 PPzzAArr March 23, 2026
Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2025-69328 7.5 Phat RiO February 9, 2026
Booking and Rental Manager <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2025-49904 7.2 Ryan Novotny November 1, 2025
Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2025-64266 7.5 Muhammad Yudha - DJ September 20, 2025
Booking and Rental Manager <= 2.3.8 - Missing Authorization Patched CVE-2025-47585 5.3 ghsinfosec May 22, 2025
Booking and Rental Manager <= 2.3.6 - Missing Authorization Patched CVE-2025-39390 5.3 LVT-tholv2k April 18, 2025
Booking and Rental Manager <= 2.2.8 - Missing Authorization Patched CVE-2025-39457 5.3 LVT-tholv2k April 17, 2025
Booking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-27011 8.8 LVT-tholv2k April 11, 2025
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection Patched CVE-2025-26921 8.8 LVT-tholv2k February 23, 2025
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization Patched CVE-2025-22720 5.3 Kévin Mosbahi (Mika) January 15, 2025
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting Patched CVE-2024-12412 6.1 vgo0 January 10, 2025
Booking and Rental Manager <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2023-35048 4.4 NeginNrb June 13, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation