WP Travel Engine < 6.8.5 Unauthenticated IDOR and Data Disclosure (CVE-2026-16737)

wpscan.com 2026-08-12查看中文 →

Security AdvisoryCVE-2026-16737MediumWP Travel Engine

Affected:

WP Travel Engine < 6.8.5

Fixed in:

6.8.5

Referenced CVEs: CVE-2026-16737

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Ninja Forms File Uploads Extension <= 3.0.22 Unauthenticated Arbitrary File Upload (CVE-2019-10869) 2026-08-18 ShopSmart for WooCommerce <= 1.0.0 Unauthenticated IDOR Sensitive Info Disclosure (CVE-2026-14832) 2026-08-17 WooMS <= 9.14 Unauthenticated SSRF and Sensitive Information Disclosure (CVE-2026-13700) 2026-08-17 Manual Image Crop < 1.15 Subscriber+ IDOR Arbitrary Attachment Image Overwrite via IDOR 2026-08-16 Visualizer <4.0.7 Contributor+ Broken Access Control Disclosure Chart Config/Credentials (CVE-2026-19726) 2026-08-16

Offline Archive

Offline screenshot & PDF are Pro-exclusive