https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:15:52.580931+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338832 EUVD-2026-338832 2026-10-13T03:15:52.583091+00:00 EUVD-2026-338832 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11868 fkie_cve-2026-11868 2026-10-13T03:15:52.583118+00:00

The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking cancellation action, which is also exposed to unauthenticated users, allowing them to cancel arbitrary bookings on the site.

 https://cve.radiocsirt.org/vuln/ghsa-mvh6-8vcr-6fw5 GHSA-mvh6-8vcr-6fw5 2026-10-13T03:15:52.583146+00:00

The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking cancellation action, which is also exposed to unauthenticated users, allowing them to cancel arbitrary bookings on the site.