Vulnerabilidades em WP Travel Engine
10 resultadosAnálise Vexday
O WP Travel Engine apresenta 10 vulnerabilidades conhecidas, com 2 críticas e nenhuma sob ataque ativo documentado até o momento. A fraqueza predominante é code injection dinâmico (CWE-98), padrão em plugins WordPress mal validados; apesar do baixo volume, 2 CVEs publicadas nos últimos 90 dias indicam atividade de descoberta recente que merece acompanhamento.
CVE-2024-30502CRITICALWordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerabilityEPSS 2.2%CVE-2025-30871HIGHWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityEPSS 0.9%CVE-2025-30870HIGHWordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2025-49308HIGHWordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2024-30504HIGHWordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerabilityEPSS 0.6%CVE-2026-49770CRITICALWordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2024-32798HIGHWordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerabilityEPSS 0.3%CVE-2024-37944MEDIUMWordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-49078HIGHWordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerabilityEPSS 0.3%CVE-2025-59574MEDIUMWordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%