WP Travel Engine
WP Travel Engine
Developer
6.8.5
Latest version
20,000
Installations
No date
Last updated
Vulnerability history
0 present
19 patched
9 Mitigation rules
- Unauthenticated Trip Difficulty Level Option Update vulnerability< 6.8.24 days ago
- Other Vulnerability Type vulnerability<= 6.7.1005/06/2026
- PHP Object Injection vulnerability<= 6.7.1204/06/2026
- WordPress WP Travel Engine - Travel and Tour Booking Plugin plugin <= 6.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wte_trip_tax Shortcode vulnerability<= 6.7.504/04/2026
- Unauthenticated Local File Inclusion vulnerability<= 6.6.708/10/2025
- Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming vulnerability<= 6.6.708/10/2025
- Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability<= 6.5.113/06/2025
- Local File Inclusion Vulnerability<= 6.5.105/06/2025
- Local File Inclusion vulnerability<= 6.3.527/03/2025
- Local File Inclusion vulnerability<= 6.3.527/03/2025
- Missing Authorization to Authenticated (Contributor+) Plugin Settings Update vulnerability<= 6.2.122/11/2024
- Cross Site Scripting (XSS) vulnerability<= 5.9.110/07/2024
- Price Manipulation vulnerability<= 5.8.022/04/2024
- SQL Injection vulnerability<= 5.7.928/03/2024
- Unauth. Blind SQL Injection vulnerability<= 5.7.928/03/2024
- Reflected Cross Site Scripting (XSS) vulnerability< 5.7.518/07/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability<= 5.3.728/02/2022
- Sensitive Information Disclosure vulnerability<= 5.3.728/02/2022
- Stored Cross-Site Scripting (XSS) vulnerability<= 5.3.001/12/2021