Threats tagged 'ghsa-f6xw-m2mf-q3q9'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-18042WP Travel · Missing Authorization Medium5.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-18042 The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking targeted by one of its front-end payment-message handlers, allowing unauthenticated attackers to cancel the payment on any customer's booking. EPSS 0.3%Vulnerability CWE-862 #ghsa-f6xw-m2mf-q3q9	CVE Database V5	2026-09-09

Page 1 of 1