The WP Travel plugin for WordPress, up to and including version 7.5.0, is vulnerable to unauthorized changes. This means that unauthenticated attackers can make changes to the plugin settings without permission. This can lead to serious security issues.