Plugin icon

Travelpayouts

travelpayouts

Vulnerabilities:

5

Last Updated:

February 26, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-01-29
Title
Travelpayouts <= 1.2.1 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2024-02-28
Title
Travelpayouts < 1.1.17 - Open Redirect
Fixed in
Fixed in 1.1.17
CVSS
4.3 (medium)
Published
2024-01-26
Title
Travelpayouts < 1.1.13 - Settings Update via CSRF
Fixed in
Fixed in 1.1.13
CVSS
4.3 (medium)
Published
2024-01-23
Title
Travelpayouts < 1.1.14 - Reflected XSS
Fixed in
Fixed in 1.1.14
CVSS
7.1 (high)
Published
2021-09-13
Title
Travelpayouts < 1.0.17 - CSRF Bypass due to Outdated Redux Framework
Fixed in
Fixed in 1.0.17
CVSS
4.3 (medium)