CVE-2026-81796

WP Travel versions up to 12.0.3 are vulnerable to unauthenticated broken authentication, allowing attackers to exploit this weakness to gain unauthorized access to user accounts. The high severity of this vulnerability (CVSS 7.3) necessitates immediate attention from organizations using affected versions to prevent potential account takeovers and data breaches. Users of WP Travel should prioritize applying security updates or implementing mitigations to safeguard their systems.