Unknown WP Travel

• CVE-2026-18042 Medium 5.3 WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Cancellation 0.3%
• CVE-2026-13146 Low 3.7 WP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOR 0.2%
• CVE-2026-13144 Low 3.7 WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Payment Reset 0.2%
• CVE-2026-13145 Medium 4.3 WP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDOR 0.3%
• CVE-2026-13143 Medium 5.3 WP Travel < 11.8.1 - Unauthenticated Payment Bypass via Forged PayPal IPN 0.3%
• CVE-2026-11868 Medium 5.3 WP Travel < 11.7.1 - Unauthenticated Arbitrary Booking Cancellation 0.3%