Vulnerabilities / Travelpayouts
Travelpayouts vulnerabilities
Advisories WPSec published for Travelpayouts. Other sources may list more. Its attack surface: Travelpayouts on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0672 | Travelpayouts <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Search Form Modification and Stored Cross-Site Scripting | Medium 6.4 | 1.2.4 |
License: CC BY 4.0