Search vulnerabilities

Results 5

Export CSV
CVE-2026-62063

WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
CVE-2026-27331

WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a through 2.1.5.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
CVE-2026-39565

WordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through <= 2.1.7.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
CVE-2024-43212

WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products