Themefic Tourfic – Travel Booking, Hotel Booking & Car Rental Wordpress Plugin
3 CVEs affecting Themefic Tourfic – Travel Booking, Hotel Booking & Car Rental Wordpress Plugin. Latest disclosed: 2025-08-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12032 | Medium | 6.5 | 2024-12-25 | The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress is vulnerable to SQL Injec… |
CVE-2024-8860 | Medium | 4.3 | 2025-08-26 | The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tf_order_status_email_resend_funct… |
CVE-2024-8319 | Medium | 4.3 | 2024-08-30 | The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.20. This is due to missing or incorrect… |