CVE-2026-59548

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions.

Credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/byteflows-travel-hotel-booking/vulnerability/wordpress-byteflows-travel-hotel-booking-plugin-1-0-0-sensitive-data-exposure-vulnerability?_s_id=cve