Vulnerability history

Subscriber+ Arbitrary Media File Move via user_profile_image vulnerability

Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification vulnerability

Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter vulnerability

Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart vulnerability

Unauthenticated Trip Difficulty Level Option Update vulnerability

Other Vulnerability Type vulnerability

PHP Object Injection vulnerability

WordPress WP Travel Engine - Travel and Tour Booking Plugin plugin <= 6.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wte_trip_tax Shortcode vulnerability

Unauthenticated Local File Inclusion vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability

Local File Inclusion Vulnerability

Local File Inclusion vulnerability

Local File Inclusion vulnerability

Missing Authorization to Authenticated (Contributor+) Plugin Settings Update vulnerability

Cross Site Scripting (XSS) vulnerability

Price Manipulation vulnerability

SQL Injection vulnerability

Unauth. Blind SQL Injection vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability

Stored Cross-Site Scripting (XSS) vulnerability