agentprime: magepeopleteam-travelly-tour-travel-booking-manager-for-woocommerceEvery new CVE for magepeopleteam-travelly-tour-travel-booking-manager-for-woocommerce.https://agentprime.io/CVE-2026-121794: Travelly <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler on Tour/Hotel Edit Screenhttps://agentprime.io/advisories/CVE-2026-121794/https://agentprime.io/advisories/CVE-2026-121794/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 08:38:08 GMTCVECVE-2026-111213: Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameterhttps://agentprime.io/advisories/CVE-2026-111213/https://agentprime.io/advisories/CVE-2026-111213/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:45:15 GMTCVECVE-2026-109590: Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-109590/https://agentprime.io/advisories/CVE-2026-109590/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:45:07 GMTCVE