WP Travel Engine – Tour Booking Plugin – Tour Operator Software

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Access violation vulnerability in WP Travel Engine – Tour Booking Plugin – Tour Operator Software 6.2.1

    Fixed

    The WP Travel Engine is a plugin for WordPress that helps with booking tours and managing tours. Unfortunately, it has a security flaw that allows people with certain levels of access to make changes...

    Read More
  • Input validation vulnerability in WP Travel Engine – Tour Booking Plugin – Tour Operator Software 5.9.1

    Fixed

    The WP Travel Engine plugin for WordPress has a security issue called Stored Cross-Site Scripting. This affects versions up to 5.9.1 because the plugin does not properly clean up or protect the infor...

    Read More
  • Vulnerability found in WP Travel Engine – Best Travel Booking WordPress Plugin

    Fixed

    The WP Travel Engine is a popular plugin for WordPress that allows users to book travel plans. However, it has a security vulnerability that allows people to change the price of bookings. This can b...

    Read More
  • Input validation vulnerability in WP Travel Engine – Best Travel Booking WordPress Plugin 5.7.9

    Fixed

    The WP Travel Engine plugin for WordPress has a security issue that allows attackers to access sensitive information from the database. This is because the plugin does not properly protect against SQ...

    Read More
  • Input validation vulnerability in WP Travel Engine – Best Travel Booking WordPress Plugin 5.7.9

    Fixed

    The WP Travel Engine plugin for WordPress is at risk of being hacked through a process called SQL Injection. This can happen in versions up to and including 5.7.9 because the plugin does not properly...

    Read More
  • Input validation vulnerability in Freemius SDK 2.5.9 (1072 components affected)

    Fixed

    The Freemius SDK for WordPress is vulnerable to an attack known as Reflected Cross-Site Scripting. This attack is possible because of insufficient security measures in versions of the Freemius SDK up ...

    Read More
  • Input validation vulnerability in WP Travel Engine – Best Travel Booking WordPress Plugin 5.3.0

    Fixed

    The WP Travel Engine WordPress plugin

    Read More
  • Access violation vulnerability in Freemius SDK (620 components affected)

    Fixed

    Freemius, a software development kit used by hundreds of WordPress plugin and theme developers, had a security vulnerability in its older versions (up to and including 2.4.2). This vulnerability could...

    Read More