Magepeopleteam Wptravelly vulnerabilities

4 vulnerabilities

Known vulnerabilities in Magepeopleteam Wptravelly, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2025-22737magepeopleteamwptravelly+1
EPSS score
0.35%
Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through <= 1.8.5.8.8CVE-2025-30891magepeopleteamwptravelly+1
EPSS score
0.69%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through <= 1.8.7.8.8CVE-2025-30892magepeopleteamwptravelly+1
EPSS score
0.66%
Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Object Injection.This issue affects WpTravelly: from n/a through <= 1.8.7.4.3CVE-2026-39565magepeopleteamwptravelly+1
EPSS score
0.23%
Missing Authorization vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through <= 2.1.7.