Extension WordPress
Vulnérabilités Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin
Cette page rassemble les failles publiées pour Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin
9 fiches
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution <= 2.1.7 – Missing Authorization
The Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to,…
*-2.1.7
2.1.8
01/06/2026
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution <= 2.1.5 – Missing Authorization
The Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and…
*-2.1.5
2.1.6
26/05/2026
WpTravelly <= 2.1.7 – Missing Authorization
The WpTravelly plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above,…
*-2.1.7
2.1.8
21/03/2026
WpTravelly <= 1.8.7 – Authenticated (Contributor+) PHP Object Injection
The WpTravelly plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.7 via deserialization of untrusted input. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a…
*-1.8.7
1.8.8
01/04/2025
WpTravelly <= 1.8.7 – Authenticated (Contributor+) Local File Inclusion
The WpTravelly plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.8.7. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the…
*-1.8.7
1.8.8
27/03/2025
WpTravelly <= 1.8.5 – Missing Authorization
The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in all versions up to, and including, 1.8.5. This makes…
*-1.8.5
1.8.6
14/01/2025
WpTravelly <= 1.7.7 – Missing Authorization
The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ttbm_trash_post() function in all versions up to, and including, 1.7.7. This…
*-1.7.7
1.7.8
09/08/2024
WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly <= 1.7.1 – Missing Authorization via ttbm_new_place_save
The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbm_new_place_save' function in all versions up to, and including,…
*-1.7.1
1.7.2
28/05/2024
WpTravelly <= 1.6.0 – Cross-Site Request Forgery
The WpTravelly plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the quick_setup() function. This makes it possible for unauthenticated attackers…
*-1.6.0
1.6.1
12/04/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.