WT
Product
WP Travel Engine
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 4Low 0
Watch
Add WP Travel Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37944 | 5.4 | Jul 20 | WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability Affected: before 5.9.2 |
| CVE-2021-24680 | 5.4 | Jan 3 | The WP Travel Engine WordPress plugin before 5.3.1 does not escape the Description field in the Trip Destination/Activities/Trip Type and Pricing Category pages, allowing users… Affected: before 5.3.1 |
| CVE-2024-32798 | 5.3 | Jun 9 | WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability Affected: before 5.8.1 |
| CVE-2024-10606 | 4.3 | Nov 23 | WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update Affected: before 6.2.2 |
Showing 4
