CVE-2025-69327
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Missing Authorization vulnerability in magepeopleteam Car Rental Manager allows exploiting incorrectly configured access control security levels. This issue affects Car Rental Manager from n/a through <= 1.0.9.
Risk Assessment
Risk of unauthorized access to rental management functionality, potentially leading to data breaches or unauthorized actions.
Recommendation
It is recommended to update the Car Rental Manager plugin to the latest available version if a patch is available, and to review access control configuration.
Other vulnerabilities in Car Rental Manager
See all- CVE-2026-27380High
The Car Rental Manager plugin versions up to 1.3.9 have a PHP Object Injection vulnerability exploitable by users with the editor role. An attacker can exploit this to execute malicious code on the server.
- CVE-2026-61985Medium
The Car Rental Manager WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 1.3.7.
Original NVD description (English source)
Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through <= 1.0.9.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS