Unknown WP Travel

3 known vulnerabilities in Unknown WP Travel, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-18042 CVSS 5.3 medium The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking targeted by one of its…
  • CVE-2026-13146 CVSS 3.7 low The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester owns the booking targeted by its bank-deposit…
  • CVE-2026-13144 CVSS 3.7 low The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the targeted booking on…