Themefic Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin

• CVE-2026-12937 High 7.5 Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter 0.5%