CVE-2025-22737

Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through = 1.8.5...

CVE-2025-22737 WordPress WpTravelly Plugin <= 1.8.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through = 1.8.5...

CVE-2025-22737

CVE-2025-22737 describes a Missing Authorization vulnerability in MagePeople Team WpTravelly (WordPress plugin/component). The description across sources indicates that access to certain functionality is not properly constrained by ACLs in WpTravelly versions up to 1.8.5. The CVSS vector from Pat...