Wptravelengine vulnerabilities

Products

• Wp Travel Engine 9
• Wp Travel Engine – Tour Booking Plugin – Tour Operator Software 8
• Travel Booking 2
• Travel Monster 2

Newest

• wptravelengine wp travel engine – tour booking plugin – tour operator software WP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attribute CVE-2026-9231 7.5 HighSeptember 22, 2026
• wptravelengine wp travel engine – tour booking plugin – tour operator software WP Travel Engine <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter CVE-2026-17087 7.5 HighAugust 16, 2026
• physcode travel booking WordPress Travel Booking theme <= 2.2.5 - Arbitrary File Upload vulnerability CVE-2026-56059 9.9 CriticalJune 26, 2026
• wptravelengine wp travel engine – tour booking plugin – tour operator software WP Travel Engine - Travel and Tour Booking Plugin <= 6.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wte_trip_tax Shortcode CVE-2026-2437 6.4 MediumApril 4, 2026
• wptravelengine travel booking WordPress Travel Booking theme <= 1.3.9 - Broken Access Control vulnerability CVE-2026-32486 5.3 MediumMarch 13, 2026
• wptravelengine travel monster WordPress Travel Monster theme <= 1.3.3 - Broken Access Control vulnerability CVE-2026-24607 5.3 MediumJanuary 23, 2026
• wptravelengine wp travel engine – tour booking plugin – tour operator software WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion CVE-2025-7634 9.8 CriticalOctober 9, 2025
• wptravelengine wp travel engine – tour booking plugin – tour operator software WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming CVE-2025-7526 9.8 CriticalOctober 9, 2025
• wptravelengine wp travel engine – tour booking plugin – tour operator software, wp travel engine +1 more WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVE-2025-5282 7.5 HighJune 13, 2025
• wp travel engine travel engine, wptravelengine wp travel engine +1 more WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability CVE-2025-30870 8.1 HighApril 1, 2025
• wp travel engine travel engine, wptravelengine wp travel engine +1 more WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability CVE-2025-30871 7.5 HighMarch 27, 2025
• wptravelengine travel monster WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37272 4.3 MediumJanuary 2, 2025
• wptravelengine wp travel engine – elementor widgets | create travel booking website using wordpress and elementor WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion CVE-2024-12272 8.8 HighDecember 25, 2024
• wptravelengine wp travel engine – tour booking plugin – tour operator software, wp travel engine +1 more WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update CVE-2024-10606 4.3 MediumNovember 23, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• wp travel engine travel engine, wptravelengine wp travel engine +1 more WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-37944 6.5 MediumJuly 20, 2024
• wp travel engine travel engine, wptravelengine wp travel engine +1 more WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability CVE-2024-32798 7.5 HighJune 9, 2024
• wp travel engine travel engine, wptravelengine wp travel engine +1 more WordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerability CVE-2024-30504 7.6 HighMarch 29, 2024
• wp travel engine travel engine, wptravelengine wp travel engine +1 more WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability CVE-2024-30502 9.3 CriticalMarch 29, 2024
• wptravelengine wp travel engine, unknown wp travel engine – travel and tour booking plugin +1 more WP Travel Engine < 5.3.1 - Editor+ Stored Cross-Site Scripting CVE-2021-24680 5.4 MediumJanuary 3, 2022