Advisories · Technology

magepeopleteam WpTravelly.

Every CVE that names magepeopleteam WpTravelly among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39565 CVE record

CVSS 4.3 Medium

WordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerability
- magepeopleteam WpTravelly
- Broken access control
Not analysed yet 8 Apr 2026
CVE-2025-30892 CVE record

CVSS 8.8 High

WordPress WpTravelly Plugin <= 1.8.7 - PHP Object Injection vulnerability
- magepeopleteam WpTravelly
- Insecure deserialization
Not analysed yet 1 Apr 2025
CVE-2025-30891 CVE record

CVSS 8.8 High

WordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability
- magepeopleteam WpTravelly
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-22737 CVE record

CVSS 5.3 Medium

WordPress WpTravelly Plugin <= 1.8.5 - Broken Access Control vulnerability
- magepeopleteam WpTravelly
- Broken access control
Not analysed yet 15 Jan 2025