GCVE - cpe:2.3:a:travelpayouts:travelpayouts:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:travelpayouts:travelpayouts:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Travelpayouts (`45f0e67e-1ad7-5b29-a601-da73d91f08b7`)
Product	Travelpayouts (`ff0c092e-b2a4-5d16-8a3f-9277956b9d71`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-68042`	vulnerable	2026-06-08 07:41:20.763678	WordPress Travelpayouts plugin <= 1.2.2 - Broken Access Control vulnerability MEDIUM (6.5) Missing Authorization vulnerability in Travelpayouts Travelpayouts travelpayouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travelpayouts: from n/a through <= 1.2.2. Published: 2026-02-20T15:46:36.826Z Updated: 2026-04-28T19:56:30.949Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/travelpayouts/vulnerability/wordpress-travelpayouts-plugin-1-2-1-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0337`	vulnerable	2026-06-08 06:22:00.372562	Travelpayouts <= 1.1.15 - Open Redirect The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.15 is vulnerable to Open Redirect due to insufficient validation on the travelpayouts_redirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. Published: 2024-03-20T05:00:02.494Z Updated: 2024-08-01T18:18:19.215Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/2f17a274-8676-4f4e-989f-436030527890/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.