Vulnerabilities in WP Travel Engine
10 resultsCVE-2024-30502CRITICALWordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerabilityEPSS 2.3%CVE-2025-30871HIGHWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityEPSS 0.8%CVE-2025-30870HIGHWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2024-30504HIGHWordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerabilityEPSS 0.6%CVE-2025-49308HIGHWordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion VulnerabilityEPSS 0.5%CVE-2026-49770CRITICALWordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2024-32798HIGHWordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerabilityEPSS 0.3%CVE-2024-37944MEDIUMWordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-49078HIGHWordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerabilityEPSS 0.3%CVE-2025-59574MEDIUMWordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%