| CVE-2026-16737 |
The WP Travel Engine WordPress plugin before 6.8.5 does not perform authorization or ownership checks when loading a…
|
5.3
Moyenne
|
12 août 2026 |
| CVE-2026-12501 |
The WP Travel Engine WordPress plugin before 6.8.2 does not verify that an incoming PayPal payment notification was sent…
|
5.3
Moyenne
|
6 août 2026 |
| CVE-2026-12500 |
The WP Travel Engine WordPress plugin before 6.8.2 does not perform a capability check on an AJAX action that updates a…
|
7.5
Élevée
|
30 juil. 2026 |
| CVE-2026-10834 |
The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile…
|
4.6
Moyenne
|
7 juil. 2026 |