Travel Booking

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-32486 Mar 13, 11:42 MEDIUM This Month

Improper access control in wptravelengine Travel Booking versions up to 1.3.9 permits unauthenticated attackers to modify data through incorrectly configured authorization checks. An attacker can exploit this vulnerability to tamper with travel booking information without requiring valid credentials or user interaction. No patch is currently available for this medium-severity vulnerability.

WordPress Authentication Bypass Travel Booking Wordpress Theme Wptravelengine

NVD VulDB

CVSS 3.1

5.3

EPSS

0.0%

CVE-2026-32486

EPSS 0% CVSS 5.3

MEDIUM This Month

Improper access control in wptravelengine Travel Booking versions up to 1.3.9 permits unauthenticated attackers to modify data through incorrectly configured authorization checks. An attacker can exploit this vulnerability to tamper with travel booking information without requiring valid credentials or user interaction. No patch is currently available for this medium-severity vulnerability.

WordPress Authentication Bypass Travel Booking +2

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy