Browse CVEs

HIGH 7.5 CVE-2025-5282 The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized loss of data due to a missing … Wp Travel Engine 6.5.2+ Fix from $1,9502025-06-13 CRITICAL 9.8 CVE-2025-30870 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel E… Wp Travel Engine 6.3.6+ Fix from $2,3002025-04-01 HIGH 7.5 CVE-2025-30871 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel E… Wp Travel Engine 6.3.6+ Fix from $1,9502025-03-27 MEDIUM 5.4 CVE-2024-37944 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Travel Engine allows Stored XSS.This … Wp Travel Engine 5.9.2+ Fix from $1,6002024-07-20 MEDIUM 5.3 CVE-2024-32798 Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0. Wp Travel Engine 5.8.1+ Fix from $1,6002024-06-09 CRITICAL 9.8 CVE-2024-30502 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel E… Wp Travel Engine 5.8.0+ Fix from $2,3002024-03-29 HIGH 7.2 CVE-2024-30504 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel E… Wp Travel Engine 5.8.0+ Fix from $1,9502024-03-29 MEDIUM 5.4 CVE-2021-24680 The WP Travel Engine WordPress plugin before 5.3.1 does not escape the Description field in the Trip Destination/Activities/Trip Type and Pricing Cat… Wp Travel Engine 5.3.1+ Fix from $1,6002022-01-03