Magepeople inc. WpTravelly vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Magepeople inc. WpTravelly: 4 record(s), with affected versions and fixes.
CVE-2026-111849
Medium · 5.3
CWE-862 Oct 21, 2026
WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5.
CVE-2026-62063
Medium · 5.4
CWE-862 Oct 1, 2026
WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.
CVE-2026-27089
High · 7.5
CWE-290 Jun 15, 2026
WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.
CVE-2026-27331
Medium · 6.3
CWE-862 May 26, 2026
WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects WpTravelly: from n/a through 2.1.5.