Travel Management (WordPress plugin)

nd-travel · plugin

Known security vulnerabilities for Travel Management (WordPress plugin). Find out in seconds which version runs on your site with WP Lens.

2 known vulnerabilities

latest Jun 15, 2022

Vulnerabilities

CVE-2019-15773
The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
Medium 6.1
CVE-2022-27859
WordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Medium 5.4