Unknown WP Travel Engine

• CVE-2026-16737 Medium 5.3 WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart 0.3%
• CVE-2026-12501 Medium 5.3 WP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification 0.2%
• CVE-2026-12500 High 7.5 WP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option Update 0.4%
• CVE-2026-10834 Medium 4.6 WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image 0.2%