CVE-2024-43212: Magepeople Wptravelly

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.7.7.

Affected products

• Magepeople Wptravelly: up to and including 1.7.7
• Magepeople Team Wptravelly: up to and including 1.7.7

Published 2024-11-01. Last modified 2026-06-17.