Skip to content
Unknown Wp Travel vulnerabilities
-
unknown wp travel, wp travel travel +1 more
WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Cancellation
CVE-2026-18042
5.3 Medium
-
unknown wp travel, wp travel travel +1 more
WP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOR
CVE-2026-13146
3.7 Low
-
unknown wp travel, wp travel travel +1 more
WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Payment Reset
CVE-2026-13144
3.7 Low
-
unknown wp travel engine, wp travel engine travel engine +1 more
WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart
CVE-2026-16737
5.3 Medium
-
unknown wp travel engine, wp travel engine travel engine +1 more
WP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification
CVE-2026-12501
5.3 Medium
-
unknown wp travel, wp travel travel +1 more
WP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDOR
CVE-2026-13145
4.3 Medium
-
unknown wp travel, wp travel travel +1 more
WP Travel < 11.8.1 - Unauthenticated Payment Bypass via Forged PayPal IPN
CVE-2026-13143
5.3 Medium
-
unknown wp travel engine, wp travel engine travel engine +1 more
WP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option Update
CVE-2026-12500
7.5 High
-
unknown wp travel, wp travel travel +1 more
WP Travel < 11.7.1 - Unauthenticated Arbitrary Booking Cancellation
CVE-2026-11868
5.3 Medium
-
unknown wp travel engine, wp travel engine travel engine +1 more
WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image
CVE-2026-10834
4.6 Medium
-
wptravelengine wp travel engine, unknown wp travel engine – travel and tour booking plugin +1 more
WP Travel Engine < 5.3.1 - Editor+ Stored Cross-Site Scripting
CVE-2021-24680
5.4 Medium