High · 7.5 CVE-2026-59548 EUVD-2026-49217GHSA-3m7x-8cmw-q274

WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack

Vendor: Byteflows Product: Byteflows Travel & Hotel Booking

Description

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Byteflows	Byteflows Travel & Hotel Booking	≤ 1.0.0	—

References

https://patchstack.com/database/wordpress/plugin/byteflows-travel-hotel-booking/vulnerability/wordpress-byteflows-travel-hotel-booking-plugin-1-0-0-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry