Login Request a demo
TO
Product
Tourfic
by themefic · last CVE Aug 13, 2026
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 3Medium 7Low 0
Severity
All severities11Critical1High3Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tourfic to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-24650
9.1
1%
Jan 24
WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability
Affected: through 2.15.3
CVE-2024-29136
8.8
1%
Mar 19
Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.17
Affected: before 2.11.19
CVE-2024-29135
8.8
1%
Mar 19
Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.15
Affected: before 2.11.16
CVE-2026-56064
8.5
0%
Jun 26
WordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerability
Affected: through 2.22.5
CVE-2026-27999
6.5
0%
Aug 13
WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability
Affected: through 2.23.1
CVE-2026-57395
6.5
0%
Jul 13
WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability
Affected: through 2.22.5
CVE-2026-57392
6.5
0%
Jul 13
WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability
Affected: through 2.22.5
CVE-2024-12032
6.5
1%
Dec 25
Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection
Affected: before 2.15.4
CVE-2024-29137
6.1
1%
Mar 19
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <=…
Affected: through 2.11.7
CVE-2024-29134
5.4
0%
Mar 19
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <=…
Affected: before 2.11.9
CVE-2026-39543
5.3
0%
Apr 8
WordPress Tourfic plugin <= 2.21.4 - Broken Access Control vulnerability
Affected: through 2.21.4
Showing 11