tour-booking-manager vulnerabilities
CVEs whose affected-version data names the tour-booking-manager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111849Medium· 5.3WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5.
▾ SunlitMagepeople inc. · tour-booking-managerEPSS 0.29%via CVEORG
CVE-2026-62063Medium· 5.4Missing Authorization vulnerability in Magepeople inc
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.
▾ SunlitMagepeople inc. · tour-booking-managerEPSS 0.17%via NVD