magepeopleteam 厂商相关 55 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
MagePeopleTeam 主要提供基于 Magento 的电商解决方案及插件开发。其历史漏洞记录显示,常见安全风险包括远程代码执行、跨站脚本及越权访问,多源于输入验证不足或配置缺陷。截至最新统计已收录 42 条 CVE,反映出组件在复杂业务逻辑下的潜在攻击面。建议用户定期更新补丁,严格实施最小权限原则,并启用 Web 应用防火墙以缓解已知风险,确保电商环境稳定。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-97251 | WordPress Bus Ticket Booking插件5.9.3 IDOR漏洞 — Bus Ticket Booking with Seat Reservation CWE-639 | 6.5 | Medium | 2026-10-01 |
| CVE-2026-39572 | WordPress plugin Bus Ticket Booking with Seat Reservation 安全漏洞 — Bus Ticket Booking with Seat Reservation CWE-497 | 4.3 | Medium | 2026-04-08 |
| CVE-2026-27095 | WordPress plugin Bus Ticket Booking with Seat Reservation 代码问题漏洞 — Bus Ticket Booking with Seat Reservation CWE-502 | 9.8 | Critical | 2026-03-25 |
| CVE-2024-49294 | WordPress plugin Bus Ticket Booking with Seat Reservation 跨站请求伪造漏洞 — Bus Ticket Booking with Seat Reservation CWE-352 | 4.3 | Medium | 2025-01-07 |
| CVE-2023-4067 | WordPress Plugin Bus Ticket Booking with Seat Reservation 跨站脚本漏洞 — Bus Ticket Booking with Seat Reservation CWE-79 | 6.1 | Medium | 2023-08-02 |
本页汇总了 magepeopleteam 厂商截至目前公开的全部 55 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。