A vulnerability categorized as critical has been discovered in WP Travel Plugin up to 11.4.0 on WordPress. This vulnerability affects unknown code. Such manipulation leads to sql injection. This vulnerability is traded as CVE-2026-45218 . The attack may be launched remotely. There is no exploit available.