Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:33:28 +0000 CVE-2026-13145 — WP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDOR https://cve.radiocsirt.org/vuln/cve-2026-13145 <p><strong>Affected:</strong> Unknown WP Travel</p> <p>The WP Travel WordPress plugin before 11.8.1 does not verify that the booking requested on its customer account dashboard belongs to the current user, allowing any logged-in user to read another customer&#39;s booking details, including billing address information, by supplying an arbitrary booking identifier.</p> <p><strong>Affected:</strong> Unknown WP Travel</p> <p>The WP Travel WordPress plugin before 11.8.1 does not verify that the booking requested on its customer account dashboard belongs to the current user, allowing any logged-in user to read another customer&#39;s booking details, including billing address information, by supplying an arbitrary booking identifier.</p> https://cve.radiocsirt.org/vuln/cve-2026-13145