Skip to content
WWP Travel Engine
Exploited and recent CVEs
-
CVE-2026-49770
Critical 9.8
WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability
0.4%
-
CVE-2026-49078
High 7.5
WordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerability
0.3%
-
CVE-2025-59574
Medium 6.5
WordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability
0.2%
-
CVE-2025-49308
High 7.5
WordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerability
0.8%
-
CVE-2025-30870
High 8.1
WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
0.8%
-
CVE-2025-30871
High 7.5
WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
1.0%
-
CVE-2024-37944
Medium 6.5
WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability
0.3%
-
CVE-2024-32798
High 7.5
WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability
0.3%
-
CVE-2024-30504
High 7.6
WordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerability
0.6%
-
CVE-2024-30502
Critical 9.3
WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability
2.2%