Magepeople inc. WpTravelly

• CVE-2026-120839 High 8.8 WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability –
• CVE-2026-120841 High 8.8 WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability –
• CVE-2026-111849 Medium 5.3 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability 0.3%
• CVE-2026-62063 Medium 5.4 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability 0.2%
• CVE-2026-27089 High 7.5 WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability 0.3%
• CVE-2026-27331 Medium 6.3 WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability 0.2%