CVE-2026-16737 | WP Travel Engine Plugin up to 6.8.4 on WordPress authorization

August 12, 2026 Yanac

A vulnerability classified as critical has been found in WP Travel Engine Plugin up to 6.8.4 on WordPress. The affected element is an unknown function. This manipulation causes authorization bypass.

This vulnerability appears as CVE-2026-16737. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More