Travel Management Project Travel Management — known CVE vulnerabilities

Every CVE whose affected-product data names Travel Management Project Travel Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2019-15773 — CVSS 6.1 (medium): The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.