Approved changes feed: RSS · Atom

cpe:2.3:a:wp_travel:wp_travel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWp Travel (8afbc4ce-9687-53f2-a63a-c7d2ac63dfea)
ProductWp Travel (4ba97b49-7f9d-5f53-a3d2-a0173e589ad6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-81796 vulnerable 2026-09-16 04:32:48.256287 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability
HIGH (7.3)
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3.
Published: 2026-09-10T14:23:46.684Z
Updated: 2026-09-21T10:58:40.731Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-45218 vulnerable 2026-06-08 08:05:11.520667 WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability
HIGH (7.7)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection.This issue affects WP Travel: from n/a through <= 11.4.0.
Published: 2026-05-12T11:02:10.114Z
Updated: 2026-05-12T12:02:36.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24568 vulnerable 2026-06-08 07:51:17.851960 WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through <= 11.1.0.
Published: 2026-01-23T14:28:56.433Z
Updated: 2026-04-28T16:14:49.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22691 vulnerable 2026-06-08 07:10:54.631636 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through <= 10.1.3.
Published: 2025-02-03T14:23:52.341Z
Updated: 2026-04-28T16:11:04.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53813 vulnerable 2026-06-08 06:54:15.569697 WordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through <= 9.6.0.
Published: 2024-12-06T13:07:37.028Z
Updated: 2026-04-28T16:10:46.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44039 vulnerable 2026-06-08 06:45:53.475876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47224 vulnerable 2026-06-08 06:14:24.482010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.