Unknown Wp Travel vulnerabilities

6 CVEs affecting Unknown Wp Travel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18042, published 2026-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-13143, published 2026-07-30. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The WP Travel WordPress plugin before 11.8.1 does not verify PayPal Instant Payment Notifications through the PayPal post-back handshake before marking a booking paid, allowing unauthenticated…
CVE-2026-11868, published 2026-07-20. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking cancellation action, which is also exposed to unauthenticated users, allowing them to…
CVE-2026-13145, published 2026-07-30. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. The WP Travel WordPress plugin before 11.8.1 does not verify that the booking requested on its customer account dashboard belongs to the current user, allowing any logged-in user to read another…
CVE-2026-18042, published 2026-09-09. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking targeted by one of its front-end payment-message handlers, allowing…
CVE-2026-13146, published 2026-09-09. Low severity, CVSS 3.7. EPSS: 0.2% chance of exploitation in the next 30 days. The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester owns the booking targeted by its bank-deposit slip submission, allowing an unauthenticated attacker who knows…
CVE-2026-13144, published 2026-09-09. Low severity, CVSS 3.7. EPSS: 0.2% chance of exploitation in the next 30 days. The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the targeted booking on one branch of its bank-deposit handler, allowing an…