Skip to contentWp Travel vulnerabilities
Newest
- wen solutions wp travel, wp travel travel +1 moreWordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerabilityCVE-2026-817967.3 High
- unknown wp travel, wp travel travel +1 moreWP Travel < 12.0.2 - Unauthenticated Arbitrary Booking CancellationCVE-2026-180425.3 Medium
- unknown wp travel, wp travel travel +1 moreWP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDORCVE-2026-131463.7 Low
- unknown wp travel, wp travel travel +1 moreWP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Payment ResetCVE-2026-131443.7 Low
- unknown wp travel, wp travel travel +1 moreWP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDORCVE-2026-131454.3 Medium
- unknown wp travel, wp travel travel +1 moreWP Travel < 11.8.1 - Unauthenticated Payment Bypass via Forged PayPal IPNCVE-2026-131435.3 Medium
- unknown wp travel, wp travel travel +1 moreWP Travel < 11.7.1 - Unauthenticated Arbitrary Booking CancellationCVE-2026-118685.3 Medium
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerabilityCVE-2026-548089.3 Critical
- wp travel travelWordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerabilityCVE-2026-452187.7 High
- wp travel travelWordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerabilityCVE-2026-245685.3 Medium
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-620636.5 Medium
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion VulnerabilityCVE-2025-532078.1 High
- wp travel travelWordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerabilityCVE-2025-226917.6 High
- wp travel travelWordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerabilityCVE-2023-472247.5 High
- wensolutions wp travel, wp travel travel +1 moreWordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerabilityCVE-2024-538136.5 Medium
- wp travel travelWordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440395.9 Medium
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-476276.5 Medium
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-432846.5 Medium