| CVE-2026-16737 |
The WP Travel Engine WordPress plugin before 6.8.5 does not perform authorization or ownership checks when loading a…
|
5.3
Medium
|
Aug 12, 2026 |
| CVE-2026-12501 |
The WP Travel Engine WordPress plugin before 6.8.2 does not verify that an incoming PayPal payment notification was sent…
|
5.3
Medium
|
Aug 6, 2026 |
| CVE-2026-12500 |
The WP Travel Engine WordPress plugin before 6.8.2 does not perform a capability check on an AJAX action that updates a…
|
7.5
High
|
Jul 30, 2026 |
| CVE-2026-10834 |
The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile…
|
4.6
Medium
|
Jul 7, 2026 |