A vulnerability labeled as critical has been found in Travelicious Plugin up to 1.6.6 on WordPress. This impacts an unknown function. Executing a manipulation can lead to deserialization.
This vulnerability is registered as CVE-2025-67997. It is possible to launch the attack remotely. No exploit is available.
The affected component should be upgraded.
