Skip to contentWp Travel Engine vulnerabilities
Newest
- unknown wp travel engine, wp travel engine travel engine +1 moreWP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cartCVE-2026-167375.3 Medium
- unknown wp travel engine, wp travel engine travel engine +1 moreWP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount VerificationCVE-2026-125015.3 Medium
- unknown wp travel engine, wp travel engine travel engine +1 moreWP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option UpdateCVE-2026-125007.5 High
- unknown wp travel engine, wp travel engine travel engine +1 moreWP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_imageCVE-2026-108344.6 Medium
- wp travel engine travel engineWordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerabilityCVE-2026-497709.8 Critical
- wp travel engine travel engineWordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerabilityCVE-2026-490787.5 High
- wp travel engine travel engineWordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-595746.5 Medium
- wp travel engine travel engineWordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion VulnerabilityCVE-2025-493087.5 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityCVE-2025-308708.1 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityCVE-2025-308717.5 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-379446.5 Medium
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerabilityCVE-2024-327987.5 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerabilityCVE-2024-305047.6 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerabilityCVE-2024-305029.3 Critical