WP Travel Engine WP Travel Engine

• CVE-2026-49770 Critical 9.8 WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability 0.4%
• CVE-2026-49078 High 7.5 WordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerability 0.3%
• CVE-2025-59574 Medium 6.5 WordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-49308 High 7.5 WordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerability 0.8%
• CVE-2025-30870 High 8.1 WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability 0.8%
• CVE-2025-30871 High 7.5 WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability 1.0%
• CVE-2024-37944 Medium 6.5 WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-32798 High 7.5 WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability 0.3%
• CVE-2024-30504 High 7.6 WordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerability 0.6%
• CVE-2024-30502 Critical 9.3 WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability 2.2%