CVE-2026-28186HIGH NVDCVSS Score 8.1Severity HIGHPublished Aug 13, 2026Vendor unknownDescriptionSubscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/travelfic-toolkit/vulnerability/wordpress-travelfic-toolkit-plugin-1-5-1-broken-access-control-vulnerability?_s_id=cve