wptravelengine vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20254
3. 20265

Newest CVEs

• CVE-2026-9231

  WP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attribute

  wptravelengine · WP Travel Engine – Tour Booking Plugin – Tour Operator Software

  High7.5
• CVE-2026-17087

  WP Travel Engine <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter

  wptravelengine · WP Travel Engine – Tour Booking Plugin – Tour Operator Software

  High7.5
• CVE-2026-2437

  WP Travel Engine - Travel and Tour Booking Plugin <= 6.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wte_trip_tax Shortcode

  wptravelengine · WP Travel Engine – Tour Booking Plugin – Tour Operator Software

  Medium6.4
• CVE-2026-32486

  WordPress Travel Booking theme <= 1.3.9 - Broken Access Control vulnerability

  wptravelengine · Travel Booking

  Medium5.3
• CVE-2026-24607

  WordPress Travel Monster theme <= 1.3.3 - Broken Access Control vulnerability

  wptravelengine · Travel Monster

  Medium5.3
• CVE-2025-7634

  WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion

  wptravelengine · WP Travel Engine – Tour Booking Plugin – Tour Operator Software

  Critical9.8
• CVE-2025-7526

  WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming

  wptravelengine · WP Travel Engine – Tour Booking Plugin – Tour Operator Software

  Critical9.8
• CVE-2025-5282

  WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

  wptravelengine · WP Travel Engine – Tour Booking Plugin – Tour Operator Software

  High7.5
• CVE-2024-37272

  WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

  wptravelengine · Travel Monster

  Medium4.3
• CVE-2024-12272

  WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion

  wptravelengine · WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor

  High8.8