WT
Product
WP Travel Engine
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 4Low 0
Watch
Add WP Travel Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30870 | 9.8 | Apr 1 | WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability Affected: before 6.3.6 |
| CVE-2024-30502 | 9.8 | Mar 29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9 Affected: before 5.8.0 |
| CVE-2025-5282 | 7.5 | Jun 13 | WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion Affected: before 6.5.2 |
| CVE-2025-30871 | 7.5 | Mar 27 | WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability Affected: before 6.3.6 |
| CVE-2024-30504 | 7.2 | Mar 29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9 Affected: before 5.8.0 |
| CVE-2024-37944 | 5.4 | Jul 20 | WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability Affected: before 5.9.2 |
| CVE-2021-24680 | 5.4 | Jan 3 | The WP Travel Engine WordPress plugin before 5.3.1 does not escape the Description field in the Trip Destination/Activities/Trip Type and Pricing Category pages, allowing users… Affected: before 5.3.1 |
| CVE-2024-32798 | 5.3 | Jun 9 | Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0 Affected: before 5.8.1 |
| CVE-2024-10606 | 4.3 | Nov 23 | WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update Affected: before 6.2.2 |
Showing 9