Wptravel Wp Travel – Ultimate Travel Booking System, Tour Management Engine
2 CVEs affecting Wptravel Wp Travel – Ultimate Travel Booking System, Tour Management Engine. Latest disclosed: 2025-01-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12067 | Medium | 6.5 | 2025-01-09 | The WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is vulnerable to SQL Injection via the 'booking_itinerary' paramete… |
CVE-2021-4389 | Medium | 4.3 | 2023-07-01 | The WP Travel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.6. This is due to missing or incorrect non… |