WPTravel WP Travel – Ultimate Travel Booking System, Tour Management Engine

• CVE-2024-12067 Medium 6.5 WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection 0.5%
• CVE-2021-4389 Medium 4.3 WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass 0.5%