104 matches found
CVE-2026-111849
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...
CVE-2026-111849
The WpTravelly tour-booking-manager plugin for WordPress, developed by Magepeople inc. , contains a Broken Access Control vulnerability (CWE-862) affecting versions up to and including 2.3.5 . The root cause is a Missing Authorization flaw that allows for the exploitation of incorrectly configure...
CVE-2026-111849 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...
CVE-2026-111849 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...
EUVD-2026-107214
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...
PT-2026-120596
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...
WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by HAIMIN in WordPress Plugin WpTravelly versions = 2.3.5...
CVE-2026-62063
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
CVE-2026-62063
The WpTravelly (tour-booking-manager) WordPress plugin by Magepeople inc. is vulnerable to a Broken Access Control issue in versions
EUVD-2026-90806
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ori Ashkenazi tarzeh in WordPress Plugin WpTravelly versions = 2.3.1...
CVE-2026-62063: Missing Authorization
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
PT-2026-103860
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
EUVD-2026-36914
Unauthenticated Bypass Vulnerability in WpTravelly = 2.1.7 versions...
CVE-2026-27089
Unauthenticated Bypass Vulnerability in WpTravelly = 2.1.7 versions...
CVE-2026-27089 WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WpTravelly = 2.1.7 versions...