WordPress WpTravelly plugin <= 1.7.1 - Missing Authorization via ttbm_new_place_save vulnerability

Missing Authorization via ttbmnewplacesave vulnerability discovered by Francesco Carlucci in WordPress Plugin WpTravelly versions = 1.7.1...

CVE-2024-0434: Improper Access Control

The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbmnewplacesave' function in all versions up to, and including, 1.7.1. This makes it possible for...