CVE Intelligence

WP Travel WP Travel vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WP Travel WP Travel: 2 record(s), with affected versions and fixes.

CVE-2026-45218 High · 7.7 CWE-89 May 12, 2026
WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection.This issue affects WP Travel: from n/a through <= 11.4.0.
CVE-2026-24568 Medium · 5.3 CWE-862 Jan 23, 2026
WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through <= 11.1.0.