CVE-2026-24607

Missing Authorization vulnerability in wptravelengine Travel Monster travel-monster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Monster: from n/a through = 1.3.3...

CVE-2026-24607

Missing Authorization vulnerability in wptravelengine Travel Monster travel-monster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Monster: from n/a through = 1.3.3...

CVE-2026-24607

Missing Authorization vulnerability in wptravelengine Travel Monster travel-monster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Monster: from n/a through = 1.3.3...

CVE-2026-24607

CVE-2026-24607: Travel Monster WordPress theme up to 1.3.3 suffers Missing Authorization (Broken Access Control). The vulnerability affects Travel Monster (WordPress theme) and is currently unpatched according to sources, with advisories indicating to upgrade to a version later than 1.3.3. No exp...

CVE-2026-24607 WordPress Travel Monster theme <= 1.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in wptravelengine Travel Monster travel-monster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Monster: from n/a through = 1.3.3...

CVE-2026-24607 WordPress Travel Monster theme <= 1.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in wptravelengine Travel Monster travel-monster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Monster: from n/a through = 1.3.3...

WordPress plugin Travel Monster has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4441

Name of the Vulnerable Software and Affected Versions Travel Monster versions through 1.3.3 Description An issue exists in Travel Monster related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of these levels...

WordPress Travel Monster theme <= 1.3.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by John P in WordPress Theme Travel Monster versions = 1.3.3...

EUVD-2024-37035

Malicious code in bioql PyPI...

CVE-2024-37272

Cross-Site Request Forgery CSRF vulnerability in wptravelengine Travel Monster travel-monster allows Cross Site Request Forgery.This issue affects Travel Monster: from n/a through = 1.1.2...

CVE-2024-37272

Cross-Site Request Forgery CSRF vulnerability in wptravelengine Travel Monster travel-monster allows Cross Site Request Forgery.This issue affects Travel Monster: from n/a through = 1.1.2...

CVE-2024-37272 WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wptravelengine Travel Monster travel-monster allows Cross Site Request Forgery.This issue affects Travel Monster: from n/a through = 1.1.2...

CVE-2024-37272 WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Travel Engine Travel Monster allows Cross Site Request Forgery.This issue affects Travel Monster: from n/a through 1.1.2...

CVE-2024-37272

CVE-2024-37272 is a CSRF vulnerability in the Travel Monster component of the Travel Monster/WP Travel Engine ecosystem. Public records indicate affected range up to version 1.1.2. CVSS score is 4.3 (3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/I:L/A:N). The connected sources confirm the vulnerability typ...

WordPress plugin Travel Monster 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Travel Monster versions = 1.1.2...

WordPress Travel Monster Theme <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Travel Monster Type Theme Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37272 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9e2e19bbb7fc Credits Dhabaleshwar Das...