"value":"The WordPress Tour & Travel Booking Plugin for WooCommerce \u2013 WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbm_new_place_save' function in all versions up to, and including, 1.7.1. This makes it possible for unauthenticated attackers to create and publish new place posts. This function is also vulnerable to CSRF."
}
]
},
"problemtype":{
"problemtype_data":[
{
"description":[
{
"lang":"eng",
"value":"CWE-284 Improper Access Control"
}
]
}
]
},
"affects":{
"vendor":{
"vendor_data":[
{
"vendor_name":"magepeopleteam",
"product":{
"product_data":[
{
"product_name":"WordPress Tour & Travel Booking Plugin for WooCommerce \u2013 WpTravelly",