Travelpayouts

Explore Travelpayouts vulnerabilities across all versions. Currently tracking 5 known vulnerabilities, including severity, impact, and patch status.

Avg CVSSMedium

5.9/ 10

Patch Coverage80%

Open

Fixed

Get automatic notifications for all Travelpayouts vulnerabilities before they are exploited.

Vulnerability Records

5 records


2026-01-29 00:00	Travelpayouts <= 1.2.1 - Missing Authorization Travelpayouts <= 1.2.1	`CVE-2025-68042`	4.3 Medium	daroo	No
2024-02-28 00:00	Travelpayouts: All Travel Brands in One Place <= 1.1.16 - Open Redirect Travelpayouts <= 1.1.16	`CVE-2024-0337`	6.1 Medium	Krzysztof Zając	Yes
2024-01-26 00:00	Travelpayouts <= 1.1.12 - Cross-Site Request Forgery to Settings Import Travelpayouts <= 1.1.12	`CVE-2023-5934`	4.3 Medium	Erwan LR	Yes
2024-01-23 00:00	Travelpayouts <= 1.1.13 - Reflected Cross-Site Scripting Travelpayouts <= 1.1.13	`CVE-2023-5932`	6.1 Medium	Krzysztof Zając	Yes
2021-09-13 00:00	Travelpayouts <= 1.0.16 - Cross-Site Request Forgery Travelpayouts <= 1.0.16	`N/A`	8.8 High	WPScanTeam	Yes

Showing 1–5 of 5 reports

Latestv1.2.2

Author

Travelpayouts

4.4(17)

88/100

Last Updated

2026-02-26 (5mo ago)

Active Installs

6,000+

Downloads

321,550

Requires WP

Requires PHP

Tested up to

WP 0

Created

2015-08-19 (11y ago)