WpTravelly vulnerabilities

3 known vulnerabilities in WpTravelly from Magepeople. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WpTravelly: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2026-120841Nov 7, 2026Magepeople

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.

• 8.8 High severity

  WpTravelly: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2026-120839Nov 7, 2026Magepeople

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.

• 7.5 High severity

  WpTravelly: Missing Authorization

  CVE-2024-43212Nov 1, 2024MagePeople Team

  Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7.