Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Travon WP Clear all filters
TI-2025-39064 CVE-2025-62916 · GHSA-79pg-9535-j68v

WordPress Flights & Hotels Booking WP Plugin plugin <= 3.1 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Travon WP Flights & Hotels Booking WP Plugin adiaha-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flights & Hotels Booking WP Plug…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00259 Published 2025-10-27 No fix listed CWE-862