VendorsThemefictourficall versions
Vulnerabilities

Themefic Tourfic

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-29135
WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability
Published 2024-03-19 · Modified
9.9EPSS 0.007
CVE-2025-24650
WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability
Published 2025-01-24 · Modified
9.1EPSS 0.006
CVE-2024-29136
WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability
Published 2024-03-19 · Modified
8.8EPSS 0.006
CVE-2024-29137
WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-03-19 · Modified
7.1EPSS 0.006
CVE-2024-12032
Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection
Published 2024-12-25 · Analyzed
6.5EPSS 0.005
CVE-2024-29134
WordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-19 · Modified
6.5EPSS 0.003