agentprime: wptravelengine-wp-travel-engine-tour-booking-plugin-tour-operator-softwareEvery new CVE for wptravelengine-wp-travel-engine-tour-booking-plugin-tour-operator-software.https://agentprime.io/CVE-2026-9231: WP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-9231/https://agentprime.io/advisories/CVE-2026-9231/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 08:27:18 GMTCVECVE-2026-17087: WP Travel Engine <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameterhttps://agentprime.io/advisories/CVE-2026-17087/https://agentprime.io/advisories/CVE-2026-17087/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 06:38:08 GMTCVECVE-2026-2437: WP Travel Engine - Travel and Tour Booking Plugin <= 6.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wte_trip_tax Shortcodehttps://agentprime.io/advisories/CVE-2026-2437/https://agentprime.io/advisories/CVE-2026-2437/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Apr 2026 08:25:19 GMTCVECVE-2025-7634: WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusionhttps://agentprime.io/advisories/CVE-2025-7634/https://agentprime.io/advisories/CVE-2025-7634/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 05:23:53 GMTCVEcriticalCVE-2025-7526: WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaminghttps://agentprime.io/advisories/CVE-2025-7526/https://agentprime.io/advisories/CVE-2025-7526/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 05:23:52 GMTCVEcriticalCVE-2025-5282: WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletionhttps://agentprime.io/advisories/CVE-2025-5282/https://agentprime.io/advisories/CVE-2025-5282/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Jun 2025 03:41:45 GMTCVECVE-2024-10606: WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Updatehttps://agentprime.io/advisories/CVE-2024-10606/https://agentprime.io/advisories/CVE-2024-10606/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 23 Nov 2024 04:32:21 GMTCVE