← Database

CVE-2026-120841

HIGH CVSS: 8.8 Published: 2026-11-07 Modified: 2026-11-07

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.

Affected Platforms

Unknown

Weakness Type

CWE-98

References