CVE-2026-39572 PUBLISHED

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through < 5.6.5.

• Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program finder

• https://patchstack.com/database/Wordpress/Plugin/bus-ticket-booking-with-seat-reservation/vulnerability/wordpress-bus-ticket-booking-with-seat-reservation-plugin-5-6-5-sensitive-data-exposure-vulnerability?_s_id=cve

• Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE

• Retrieve Embedded Sensitive Data