All packages
WpTravelly vulnerabilities
3 known CVE vulnerabilities in WpTravelly, translated and rated.
- CVE-2026-27089High
There is an unauthenticated bypass vulnerability in WpTravelly versions up to 2.1.7.
- CVE-2026-27331Medium
The WpTravelly plugin for WordPress up to version 2.1.5 suffers from missing authorization, allowing exploitation of incorrectly configured access control security levels.
- CVE-2026-39565Medium
The WpTravelly tour booking manager plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 2.1.7.