Live › vulnerability › CVE-2026-112824
Go to dashboardThe Bus Ticket Booking with Seat Reservation WordPress plugin from Magepeople has a missing authorization check, so access control is not enforced on some actions. The sources do not say exactly which actions an attacker could reach or what data they could read or change.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Bus Ticket Booking with Seat Reservation plugin at version 5.9.7 or earlier are affected. Sites without this plugin installed can skip it. The sources do not say which roles or configurations make the flaw reachable.
No product ranges from the sources yet.
bus-ticket-booking-with-seat-reservation in the WordPress admin plugin list or wp plugin get bus-ticket-booking-with-seat-reservation --field=version5.9.7; the description says versions through 5.9.7 are affectedbus-ticket-booking-with-seat-reservation to a version later than 5.9.7, as published by the vendor (fixed version unknown)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7.
This page as .md · .json · in your agent: get_signal("CVE-2026-112824")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.