Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
wp-travel
WordPress
· Plugin
15 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 12.0.3 - Missing Authorization
CVE-2026-81796
wp-travel
WordPress
Medium
Fix reported
2026-09-23
Travel <= 12.0.1 - Missing Authorization
CVE-2026-18042
wp-travel
WordPress
Medium
Fix reported
2026-09-10
Travel <= 12.0.1 - Unauthenticated Insecure Direct Object Reference
CVE-2026-13146
wp-travel
WordPress
Medium
Fix reported
2026-09-10
Travel <= 12.0.1 - Missing Authorization
CVE-2026-13144
wp-travel
WordPress
Medium
Fix reported
2026-09-10
WP Travel – Ultimate Travel Booking System, Tour Management Engine < 11.8.1 - Unauthenticated Payment Bypass
CVE-2026-13143
wp-travel
WordPress
Medium
Fix reported
2026-08-14
WP Travel – Ultimate Travel Booking System, Tour Management Engine < 11.8.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
CVE-2026-13145
wp-travel
WordPress
Medium
Fix reported
2026-08-04
Travel <= 11.7.0 - Missing Authorization
CVE-2026-11868
wp-travel
WordPress
Medium
Fix reported
2026-07-30
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 11.4.0 - Authenticated (Contributor+) SQL Injection
CVE-2026-45218
wp-travel
WordPress
Medium
Fix reported
2026-05-19
Travel <= 11.1.0 - Missing Authorization
CVE-2026-24568
wp-travel
WordPress
Medium
Fix reported
2026-02-03
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection
CVE-2024-12067
wp-travel
WordPress
Medium
Fix reported
2025-11-05
WP Travel <= 10.1.3 - Authenticated (Author+) SQL Injection
CVE-2025-22691
wp-travel
WordPress
Medium
Fix reported
2025-04-25
WP Travel <= 9.6.0 - Missing Authorization
CVE-2024-53813
wp-travel
WordPress
Medium
Fix reported
2024-12-11
WP Travel <= 9.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2024-44039
wp-travel
WordPress
Medium
Fix reported
2024-10-02
WP Travel <= 7.7.0 - Missing Authorization via Multiple AJAX Actions
CVE-2023-47224
wp-travel
WordPress
High
Fix reported
2024-01-22
WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass
CVE-2021-4389
wp-travel
WordPress
Medium
Fix reported
2024-01-22
