Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

WP Travel — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in WP Travel, with AI-generated Chinese analysis, references, and POCs.

Vendor: WP Travel

CVE ID Title CVSS Severity Published
CVE-2026-81796 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability CWE-288 7.3 High 2026-09-10
CVE-2026-18042 WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Cancellation - - 2026-09-09
CVE-2026-13146 WP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOR - - 2026-09-09
CVE-2026-13144 WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Payment Reset - - 2026-09-09
CVE-2026-13143 WP Travel < 11.8.1 - Unauthenticated Payment Bypass via Forged PayPal IPN - - 2026-07-30
CVE-2026-13145 WP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDOR - - 2026-07-30
CVE-2026-11868 WP Travel < 11.7.1 - Unauthenticated Arbitrary Booking Cancellation - - 2026-07-20
CVE-2026-45218 WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability CWE-89 7.7 High 2026-05-12
CVE-2026-24568 WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-01-23
CVE-2025-22691 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability CWE-89 7.6 High 2025-02-03
CVE-2023-47224 WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerability CWE-862 7.5 High 2025-01-02
CVE-2024-53813 WordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability CWE-862 6.5 Medium 2024-12-06
CVE-2024-44039 WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium 2024-10-06

All 13 known CVE vulnerabilities affecting WP Travel with full Chinese analysis, references, and POCs where available.