CVE-2026-62063
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.
- Published Oct 1, 2026
- CVSS 5.4 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)