CVE-2025-26921

Published Mar 15, 2025

Last updated 20 days ago

CVSS high 8.8

Overview

Description
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager allows Object Injection. This issue affects Booking and Rental Manager: from n/a through 2.2.6.
Source
audit@patchstack.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

audit@patchstack.com
CWE-502

Social media

Hype score
Not currently trending

  1. CVE-2025-26921 (CVSS:8.8, HIGH) is Awaiting Analysis. Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager allows Object Injection. Th..https://t.co/K4cOXIq8k6 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    @cracbot

    20 Mar 2025

    8 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 🚨 CVE-2025-26921 🔴 HIGH (8.8) 🏢 magepeopleteam - Booking and Rental Manager 🏗️ Unknown Version 🔗 https://t.co/KbQG3kl8Fk #CyberCron #VulnAlert #InfoSec https://t.co/4NhaDeaCfG

    @cybercronai

    17 Mar 2025

    2 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. New post from https://t.co/uXvPWJy6tj (CVE-2025-26921 | magepeopleteam Booking and Rental Manager Plugin up to 2.2.6 on WordPress deserialization) has been published on https://t.co/nwCviL01UZ

    @WolfgangSesin

    16 Mar 2025

    13 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. [CVE-2025-26921: HIGH] Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager allows Object Injection. This issue affects Booking and Rental Manager: from n/a through 2.2.6.#cybersecurity,#vulnerability https://t.co/UM1kY5EOFr https://t.co/PM

    @CveFindCom

    15 Mar 2025

    7 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. CVE-2025-26921 Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager allows Object Injection. This issue affects Booking and Rental Manager: f… https://t.co/sxHIH9H0wk

    @CVEnew

    15 Mar 2025

    179 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References