Wp Travel Engine Wp Travel Engine

10 CVEs affecting Wp Travel Engine Wp Travel Engine. Latest disclosed: 2026-06-15. Critical: 2, High: 6.

Top CVEs affecting Wp Travel Engine Wp Travel Engine
CVESeverityScorePublishedSummary
CVE-2026-49770Critical9.82026-06-15Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.
CVE-2024-30502Critical9.32024-03-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel Engine: fro…
CVE-2025-30870High8.12025-04-01Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel Engine wp-t…
CVE-2024-30504High7.62024-03-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel Engine: fro…
CVE-2026-49078High7.52026-06-15Unauthenticated Other Vulnerability Type in WP Travel Engine <= 6.7.10 versions.
CVE-2025-49308High7.52025-06-06Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel Engine wp-t…
CVE-2025-30871High7.52025-03-27Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel Engine wp-t…
CVE-2024-32798High7.52024-06-09Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0.
CVE-2025-59574Medium6.52025-09-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel Engine WP Travel Engine wte-elementor-widgets a…
CVE-2024-37944Medium6.52024-07-20Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Travel Engine allows Stored XSS.This issue affe…