Advisories · Technology

Magepeople inc. WpTravelly.

Every CVE that names Magepeople inc. WpTravelly among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-120839 CVE record

CVSS 8.8 High

WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability
- Magepeople inc. WpTravelly
- File inclusion
Not analysed yet 7 Nov 2026
CVE-2026-120841 CVE record

CVSS 8.8 High

WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability
- Magepeople inc. WpTravelly
- File inclusion
Not analysed yet 7 Nov 2026
CVE-2026-111849 CVE record

CVSS 5.3 Medium

WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
- Magepeople inc. WpTravelly
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-62063 CVE record

CVSS 5.4 Medium

WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
- Magepeople inc. WpTravelly
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-27089 CVE record

CVSS 7.5 High

WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability
- Magepeople inc. WpTravelly
- Authentication bypass
Not analysed yet 15 Jun 2026
CVE-2026-27331 CVE record

CVSS 6.3 Medium

WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability
- Magepeople inc. WpTravelly
- Broken access control
Not analysed yet 26 May 2026