agentprime: wp-travel-engineEvery new CVE for wp-travel-engine.https://agentprime.io/CVE-2026-16737: WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_carthttps://agentprime.io/advisories/CVE-2026-16737/https://agentprime.io/advisories/CVE-2026-16737/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 06:00:15 GMTCVECVE-2026-12501: WP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verificationhttps://agentprime.io/advisories/CVE-2026-12501/https://agentprime.io/advisories/CVE-2026-12501/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:00:56 GMTCVECVE-2026-12500: WP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option Updatehttps://agentprime.io/advisories/CVE-2026-12500/https://agentprime.io/advisories/CVE-2026-12500/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:00:10 GMTCVECVE-2026-10834: WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_imagehttps://agentprime.io/advisories/CVE-2026-10834/https://agentprime.io/advisories/CVE-2026-10834/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 06:00:01 GMTCVECVE-2026-49770: WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-49770/https://agentprime.io/advisories/CVE-2026-49770/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:19:26 GMTCVEcriticalCVE-2026-49078: WordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerabilityhttps://agentprime.io/advisories/CVE-2026-49078/https://agentprime.io/advisories/CVE-2026-49078/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:19:15 GMTCVECVE-2025-59574: WordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-59574/https://agentprime.io/advisories/CVE-2025-59574/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Sep 2025 18:25:55 GMTCVECVE-2025-49308: WordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-49308/https://agentprime.io/advisories/CVE-2025-49308/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Jun 2025 12:53:49 GMTCVECVE-2025-30870: WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2025-30870/https://agentprime.io/advisories/CVE-2025-30870/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 05:31:39 GMTCVECVE-2025-30871: WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2025-30871/https://agentprime.io/advisories/CVE-2025-30871/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Mar 2025 10:55:36 GMTCVECVE-2024-37944: WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2024-37944/https://agentprime.io/advisories/CVE-2024-37944/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 20 Jul 2024 08:52:10 GMTCVECVE-2024-32798: WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerabilityhttps://agentprime.io/advisories/CVE-2024-32798/https://agentprime.io/advisories/CVE-2024-32798/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 09 Jun 2024 12:51:36 GMTCVECVE-2024-30504: WordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2024-30504/https://agentprime.io/advisories/CVE-2024-30504/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:09:27 GMTCVECVE-2024-30502: WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2024-30502/https://agentprime.io/advisories/CVE-2024-30502/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:08:27 GMTCVEcritical