<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wp-travel</title><description>Every new CVE for wp-travel.</description><link>https://agentprime.io/</link><item><title>CVE-2026-18042: WP Travel &lt; 12.0.2 - Unauthenticated Arbitrary Booking Cancellation</title><link>https://agentprime.io/advisories/CVE-2026-18042/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18042/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 06:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13146: WP Travel &lt; 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOR</title><link>https://agentprime.io/advisories/CVE-2026-13146/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13146/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 06:00:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13144: WP Travel &lt; 12.0.2 - Unauthenticated Arbitrary Booking Payment Reset</title><link>https://agentprime.io/advisories/CVE-2026-13144/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13144/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 06:00:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13145: WP Travel &lt; 11.8.1 - Subscriber+ Booking PII Disclosure via IDOR</title><link>https://agentprime.io/advisories/CVE-2026-13145/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13145/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 06:00:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13143: WP Travel &lt; 11.8.1 - Unauthenticated Payment Bypass via Forged PayPal IPN</title><link>https://agentprime.io/advisories/CVE-2026-13143/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13143/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 06:00:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11868: WP Travel &lt; 11.7.1 - Unauthenticated Arbitrary Booking Cancellation</title><link>https://agentprime.io/advisories/CVE-2026-11868/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11868/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 06:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-45218: WordPress WP Travel plugin &lt;= 11.4.0 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-45218/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-45218/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 11:02:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24568: WordPress WP Travel plugin &lt;= 11.1.0 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-24568/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24568/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jan 2026 14:28:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-22691: WordPress WP Travel plugin &lt;= 10.1.3 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-22691/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-22691/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Feb 2025 14:23:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-47224: WordPress WP Travel plugin &lt;= 7.8.0 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-47224/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-47224/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jan 2025 12:00:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-53813: WordPress WP Travel plugin &lt;= 9.6.0 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-53813/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-53813/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Dec 2024 13:07:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-44039: WordPress WP Travel plugin &lt;= 9.3.1 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-44039/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-44039/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 06 Oct 2024 12:12:50 GMT</pubDate><category>CVE</category></item></channel></rss>