VendorsWP Travel Enginewp_travel_engineany version
Vulnerabilities

WP Travel Engine Wp Travel Engine any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2024-30502
WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability
Published 2024-03-29 · Modified
9.8EPSS 0.022
CVE-2025-30870
WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
Published 2025-04-01 · Modified
9.8EPSS 0.008
CVE-2024-30504
WordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerability
Published 2024-03-29 · Modified
7.6EPSS 0.006
CVE-2025-30871
WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
Published 2025-03-27 · Modified
7.5EPSS 0.010
CVE-2024-32798
WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability
Published 2024-06-09 · Analyzed
7.5EPSS 0.003
CVE-2025-5282
WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Published 2025-06-13 · Analyzed
7.5EPSS 0.003
CVE-2024-37944
WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability
Published 2024-07-20 · Analyzed
6.5EPSS 0.003
CVE-2021-24680
WP Travel Engine < 5.3.1 - Editor+ Stored Cross-Site Scripting
Published 2022-01-03 · Modified
5.4EPSS 0.006
CVE-2024-10606
WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
Published 2024-11-23 · Analyzed
4.3EPSS 0.003