CyberRota
← Ana sayfaya dön

CVE-2026-11868

MEDIUM · CVSS 5.3 EPSS %0.14

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-20T07:16:34.650 · Çekilme zamanı: 2026-07-21T06:06:22.904060+00:00

CyberRota Yorumu

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-11868
Severity
MEDIUM
CVSS
5.3
EPSS
%0.14
WordPress

Orijinal NVD Açıklaması

The WP Travel WordPress plugin before 11.7.1 does not perform capability or ownership checks on its booking cancellation action, which is also exposed to unauthenticated users, allowing them to cancel arbitrary bookings on the site.