Bus Ticket Booking with Seat Reservation — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Bus Ticket Booking with Seat Reservation, with AI-generated Chinese analysis, references, and POCs.

Vendor: magepeopleteam

CVE ID	Title	CVSS	Severity	Published
CVE-2026-97251	WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability CWE-639	6.5	Medium	2026-10-01
CVE-2025-66105	WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.8 - Broken Access Control vulnerability CWE-862	5.3	Medium	2026-05-07
CVE-2026-39572	WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability CWE-497	4.3	Medium	2026-04-08
CVE-2026-27095	WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability CWE-502	9.8	Critical	2026-03-25
CVE-2024-49294	WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability CWE-352	4.3	Medium	2025-01-07
CVE-2024-43985	WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability CWE-79	5.9	Medium	2024-09-17
CVE-2023-4067	Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting CWE-79	6.1	Medium	2023-08-02

All 7 known CVE vulnerabilities affecting Bus Ticket Booking with Seat Reservation with full Chinese analysis, references, and POCs where available.