| CVE-2026-18042 |
The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking…
|
5.3
Medium
|
Sep 9, 2026 |
| CVE-2026-13144 |
The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the…
|
3.7
Low
|
Sep 9, 2026 |
| CVE-2026-13146 |
The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester owns the booking targeted by…
|
3.7
Low
|
Sep 9, 2026 |
| CVE-2026-13143 |
The WP Travel WordPress plugin before 11.8.1 does not verify PayPal Instant Payment Notifications through the PayPal…
|
5.3
Medium
|
Jul 30, 2026 |
| CVE-2026-13145 |
The WP Travel WordPress plugin before 11.8.1 does not verify that the booking requested on its customer account…
|
4.3
Medium
|
Jul 30, 2026 |
| CVE-2026-11868 |
The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking…
|
5.3
Medium
|
Jul 20, 2026 |