Description
Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PhysCode | Travel Booking | ≤ 2.2.5 | — |
Critical · 9.9
CVE-2026-56059
EUVD-2026-39713GHSA-w944-78mf-7qrv
WordPress Travel Booking theme <= 2.2.5 - Arbitrary File Upload vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack