Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

WP Travel — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in WP Travel, with AI-generated Chinese analysis, references, and POCs.

Vendor: WP Travel

CVE IDTitleCVSSSeverityPublished
CVE-2026-13143 WP Travel < 11.8.1 - Unauthenticated Payment Bypass via Forged PayPal IPN --2026-07-30
CVE-2026-13145 WP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDOR --2026-07-30
CVE-2026-11868 WP Travel < 11.7.1 - Unauthenticated Arbitrary Booking Cancellation --2026-07-20
CVE-2026-45218 WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability CWE-89 7.7 High2026-05-12
CVE-2026-24568 WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability CWE-862 5.3 Medium2026-01-23
CVE-2025-22691 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability CWE-89 7.6 High2025-02-03
CVE-2023-47224 WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerability CWE-862 7.5 High2025-01-02
CVE-2024-53813 WordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability CWE-862 6.5 Medium2024-12-06
CVE-2024-44039 WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium2024-10-06

All 9 known CVE vulnerabilities affecting WP Travel with full Chinese analysis, references, and POCs where available.