📦 Wp Travel Engine

This vulnerability allows unauthenticated attackers to perform blind SQL injection attacks on WordPress sites running the WP Travel Engine plugin. Attackers can extract sensitive database information,...

The WP Travel Engine plugin for WordPress has an unauthenticated data deletion vulnerability. Attackers can delete arbitrary posts without authentication due to missing capability checks. All WordPres...

This vulnerability allows attackers to include local files on the server through improper filename control in PHP include/require statements. It affects all WordPress sites using WP Travel Engine plug...

This vulnerability allows attackers to include local files on the server through improper input validation in WP Travel Engine WordPress plugin. Attackers can potentially read sensitive files or execu...

CVE-2024-32798 is a missing authorization vulnerability in WP Travel Engine WordPress plugin that allows attackers to manipulate booking prices without proper authentication. This affects all WordPres...

This stored XSS vulnerability in WP Travel Engine allows attackers to inject malicious scripts into web pages that are then executed when other users view those pages. It affects all WordPress sites u...