| CVE-2026-18042 |
The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking…
|
5.3
Moyenne
|
9 sept. 2026 |
| CVE-2026-13144 |
The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the…
|
3.7
Faible
|
9 sept. 2026 |
| CVE-2026-13146 |
The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester owns the booking targeted by…
|
3.7
Faible
|
9 sept. 2026 |
| CVE-2026-13143 |
The WP Travel WordPress plugin before 11.8.1 does not verify PayPal Instant Payment Notifications through the PayPal…
|
5.3
Moyenne
|
30 juil. 2026 |
| CVE-2026-13145 |
The WP Travel WordPress plugin before 11.8.1 does not verify that the booking requested on its customer account…
|
4.3
Moyenne
|
30 juil. 2026 |
| CVE-2026-11868 |
The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking…
|
5.3
Moyenne
|
20 juil. 2026 |