Skip to contentWptravelengine Wp Travel Engine – Tour Booking Plugin – Tour Operator Software vulnerabilities
- wptravelengine wp travel engine – tour booking plugin – tour operator softwareWP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode AttributeCVE-2026-92317.5 High
- wptravelengine wp travel engine – tour booking plugin – tour operator softwareWP Travel Engine <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' ParameterCVE-2026-170877.5 High
- wptravelengine wp travel engine – tour booking plugin – tour operator softwareWP Travel Engine - Travel and Tour Booking Plugin <= 6.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wte_trip_tax ShortcodeCVE-2026-24376.4 Medium
- wptravelengine wp travel engine – tour booking plugin – tour operator softwareWP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File InclusionCVE-2025-76349.8 Critical
- wptravelengine wp travel engine – tour booking plugin – tour operator softwareWP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File RenamingCVE-2025-75269.8 Critical
- wptravelengine wp travel engine – tour booking plugin – tour operator software, wp travel engine +1 moreWP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post DeletionCVE-2025-52827.5 High
- wptravelengine wp travel engine – tour booking plugin – tour operator software, wp travel engine +1 moreWP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings UpdateCVE-2024-106064.3 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium