Magepeopleteam Travelly – Tour & Travel Booking Manager For Woocommerce
2 CVEs affecting Magepeopleteam Travelly – Tour & Travel Booking Manager For Woocommerce. Latest disclosed: 2026-10-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-109590 | Medium | 6.4 | 2026-10-28 | The Tour Booking Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width', 'height' and 'zoom' shortcode attributes of the [tt… |
CVE-2026-111213 | Medium | 4.3 | 2026-10-28 | The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2… |