Plugin icon

Travelly – Tour & Travel Booking Manager for WooCommerce

tour-booking-manager

Vulnerabilities:

9

Last Updated:

August 21, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-06-01
Title
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution < 2.1.8 - Missing Authorization
Fixed in
Fixed in 2.1.8
CVSS
5.3 (medium)
Published
2026-05-26
Title
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution < 2.1.6 - Missing Authorization
Fixed in
Fixed in 2.1.6
CVSS
4.3 (medium)
Published
2026-03-21
Title
WpTravelly < 2.1.8 - Missing Authorization
Fixed in
Fixed in 2.1.8
CVSS
4.3 (medium)
Published
2025-04-01
Title
WpTravelly < 1.8.8 - Authenticated (Contributor+) PHP Object Injection
Fixed in
Fixed in 1.8.8
CVSS
8.8 (high)
Published
2025-03-27
Title
WpTravelly < 1.8.8 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 1.8.8
CVSS
8.8 (high)
Published
2025-01-14
Title
WpTravelly < 1.8.6 - Missing Authorization
Fixed in
Fixed in 1.8.6
CVSS
5.3 (medium)
Published
2024-08-09
Title
WpTravelly < 1.7.8 - Missing Authorization
Fixed in
Fixed in 1.7.8
CVSS
5.3 (medium)
Published
2024-05-28
Title
WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly < 1.7.2 - Missing Authorization via ttbm_new_place_save
Fixed in
Fixed in 1.7.2
CVSS
5.3 (medium)
Published
2024-04-12
Title
WpTravelly < 1.6.1 - Cross-Site Request Forgery
Fixed in
Fixed in 1.6.1
CVSS
4.3 (medium)