Skip to contentWptravelengine Wp Travel Engine vulnerabilities
- wptravelengine wp travel engine – tour booking plugin – tour operator software, wp travel engine +1 moreWP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post DeletionCVE-2025-52827.5 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityCVE-2025-308708.1 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityCVE-2025-308717.5 High
- wptravelengine wp travel engine – tour booking plugin – tour operator software, wp travel engine +1 moreWP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings UpdateCVE-2024-106064.3 Medium
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-379446.5 Medium
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerabilityCVE-2024-327987.5 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerabilityCVE-2024-305047.6 High
- wp travel engine travel engine, wptravelengine wp travel engine +1 moreWordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerabilityCVE-2024-305029.3 Critical
- wptravelengine wp travel engine, unknown wp travel engine – travel and tour booking plugin +1 moreWP Travel Engine < 5.3.1 - Editor+ Stored Cross-Site ScriptingCVE-2021-246805.4 Medium