Vulnerabilities / Yatra
Yatra vulnerabilities
Advisories WPSec published for Yatra – Travel Booking & Tour Operator Software. Other sources may list more. Its attack surface: Yatra on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2272 | Yatra <= 3.0.17 - Unauthenticated Payment Bypass via 'payment_gateway' Parameter | Medium 5.3 | 3.1.0 |
License: CC BY 4.0