Skip to content
PluginCanary

Travelly - Tour & Travel Booking Manager for WooCommerce

by magepeopleteam · 1,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 27 Oct 2026, fixed in 2.3.8.

81/ 100 Canary Score
Sub-scores for Travelly - Tour & Travel Booking Manager for WooCommerce
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 2.3.8. Update to version 2.3.8 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 2.3.8. Update to version 2.3.8 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 2.3.6. Update to version 2.3.6 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 2.3.2. Update to version 2.3.2 or later.1 Oct 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master17 Feb 2021 to 17 Feb 2021, 1 commits
magepeopleteam18 Feb 2021 to 4 Nov 2026, 208 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
8
Tested up to
7.0 vs 7.1
Requires PHP
7.0 supported 8.2+
Releases per quarter for Travelly - Tour & Travel Booking Manager for WooCommerce
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 20250
Q1 20260
Q2 20260
Q3 20262
Q4 20265

Last release 3 Nov 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes6.4<= 2.3.62.3.80
27 Oct 2026Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter4.3<= 2.3.62.3.80
19 Oct 2026Travelly – Tour & Travel Booking Manager for WooCommerce <= 2.3.5 - Missing Authorization5.3<= 2.3.52.3.60
1 Oct 2026Travelly – Tour & Travel Booking Manager for WooCommerce <= 2.3.1 - Missing Authorization4.3<= 2.3.12.3.20
1 Jun 2026Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution <= 2.1.7 - Missing Authorization5.3<= 2.1.72.1.8n/a
26 May 2026Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution <= 2.1.5 - Missing Authorization4.3<= 2.1.52.1.6n/a
21 Mar 2026WpTravelly <= 2.1.7 - Missing Authorization4.3<= 2.1.72.1.8n/a
1 Apr 2025WpTravelly <= 1.8.7 - Authenticated (Contributor+) PHP Object Injection8.8<= 1.8.71.8.8n/a
27 Mar 2025WpTravelly <= 1.8.7 - Authenticated (Contributor+) Local File Inclusion8.8<= 1.8.71.8.8n/a
14 Jan 2025WpTravelly <= 1.8.5 - Missing Authorization5.3<= 1.8.51.8.6n/a
9 Aug 2024WpTravelly <= 1.7.7 - Missing Authorization5.3<= 1.7.71.7.8n/a
28 May 2024WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly <= 1.7.1 - Missing Authorization via ttbm_new_place_save5.3<= 1.7.11.7.2n/a
12 Apr 2024WpTravelly <= 1.6.0 - Cross-Site Request Forgery4.3<= 1.6.01.6.1n/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.8 from 45 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star39
4 star5
3 star1
2 star0
1 star0

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Travelly - Tour & Travel Booking Manager for WooCommerce
4 May 202685
11 May 2026202
18 May 2026220
25 May 2026170
1 Jun 2026161
8 Jun 2026116
15 Jun 2026101
22 Jun 202696
29 Jun 202697
6 Jul 2026106
13 Jul 2026149
20 Jul 2026167
27 Jul 2026648
3 Aug 2026274
10 Aug 2026163
17 Aug 2026645
24 Aug 2026229
31 Aug 2026666
7 Sep 2026235
14 Sep 2026270
21 Sep 2026216
28 Sep 2026882
5 Oct 20261,375
12 Oct 2026835
19 Oct 20261,257
26 Oct 2026572
2 Nov 202644

Weekly downloads over the last 4 weeks are 83% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version2.3.10
Authormagepeopleteam
Added18 Feb 2021
Last updated3 Nov 2026
Active installs1,000+
Requires WordPress4.4.0
Tested up to7.0.8
Requires PHP7.0
CategoryE-commerce & Shopping
Tagstour booking, Hotel Booking, Tour Operator, travel agency, Travel booking

Other plugins by this author: Event Booking Manager for WooCommerce - Sell Tickets, Event Registration, RSVP & Event Calendar, E-cab Taxi Booking Manager for Woocommerce, Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment, Bus Ticket Booking with Seat Reservation, Advanced Partial Payment or Deposit for WooCommerce, Appointment Booking Plugin for WooCommerce | Online Booking Calendar & Service Manager, Car Rental Manager - Online Vehicle Booking System, Multipurpose Ticket Booking Manager (Bus/Train/Ferry/Boat/Shuttle), Business Hours With Online/Offline Status, MagePeople Shuttle Booking - Airport Shuttle, Transfer & Route Booking for WooCommerce, MagePeople Ferry Booking System, Yacht Booking System - Boat Charter Booking Plugin

Questions

Is Travelly - Tour & Travel Booking Manager for WooCommerce still maintained?

Travelly - Tour & Travel Booking Manager for WooCommerce was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is Travelly - Tour & Travel Booking Manager for WooCommerce safe?

Travelly - Tour & Travel Booking Manager for WooCommerce has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Travelly - Tour & Travel Booking Manager for WooCommerce?

The wordpress.org author is magepeopleteam. Recent committers: magepeopleteam, plugin-master. We have recorded no ownership change.

What can I use instead of Travelly - Tour & Travel Booking Manager for WooCommerce?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue