CVE-2026-32346 WordPress Travel Agency theme <= 1.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through = 1.5.5...

WordPress Travel Agency Theme <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Travel Agency Type Theme Vulnerable versions = 1.4.9 Fixed in 1.5.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37451 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3d26a472da99 Credits Dhabaleshwar Das...