How many wptravelengine WP Travel Engine CVEs are in CISA KEV?

None of wptravelengine WP Travel Engine's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wptravelengine WP Travel Engine are affected?

41 distinct wptravelengine WP Travel Engine versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wptravelengine WP Travel Engine CVEs?

wptravelengine WP Travel Engine's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical wptravelengine WP Travel Engine vulnerabilities are there?

wptravelengine WP Travel Engine has 3 critical and 6 high-severity CVEs.

What is the average severity of wptravelengine WP Travel Engine CVEs?

The average CVSS base score across wptravelengine WP Travel Engine's scored CVEs is 7.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wptravelengine

13 CVEs

wptravelengine WP Travel Engine Vulnerabilities

Name: wptravelengine WP Travel Engine vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WP Travel Engine by wptravelengine.

13

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.5

Avg CVSS

2022–2026

Last updated June 15, 2026

Overview

wptravelengine WP Travel Engine has 13 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wptravelengine WP Travel Engine, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wptravelengine WP Travel Engine's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High6

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wptravelengine WP Travel Engine's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No wptravelengine WP Travel Engine CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every wptravelengine WP Travel Engine version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.8.02 CVEs
< 6.3.62 CVEs
<= 5.7.92 CVEs
<= 6.3.52 CVEs
>= 5.8.02 CVEs
>= 6.3.62 CVEs
< 5.3.11 CVE
< 5.8.11 CVE
< 5.9.21 CVE
< 6.2.21 CVE
< 6.5.21 CVE
<= 1.4.21 CVE
<= 5.8.01 CVE
<= 5.9.11 CVE
<= 6.5.11 CVE
<= 6.7.101 CVE
<= 6.7.121 CVE
>= 1.4.31 CVE
>= 5.8.11 CVE
>= 5.9.21 CVE
>= 6.5.21 CVE
>= 6.7.111 CVE
>= 6.8.01 CVE

Fixed in

> 5.7.92 CVEs
> 6.3.52 CVEs
5.8.02 CVEs
6.3.62 CVEs
6.5.22 CVEs
> 1.4.21 CVE
> 5.8.01 CVE
> 5.9.11 CVE
> 6.5.11 CVE
> 6.7.101 CVE
> 6.7.121 CVE
1.4.31 CVE
5.3.11 CVE
5.8.11 CVE

Find a version

13 CVEs

Sort

WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability
CVE-2026-49770
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.4% (31th pct)2026-06-15
WordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerability
CVE-2026-49078
Patch
CWE-1284
High · CVSS 7.5
EPSS 0.3% (17th pct)2026-06-15
WordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-59574
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (5th pct)2025-09-22
WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
CVE-2025-5282
Patch
CWE-862
High · CVSS 7.5
EPSS 0.3% (18th pct)2025-06-13
WordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerability
CVE-2025-49308
Patch
CWE-98
High · CVSS 7.5
EPSS 0.6% (46th pct)2025-06-06
WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
CVE-2025-30870
Patch
CWE-98
Critical · CVSS 9.8
EPSS 0.7% (51th pct)2025-04-01
WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
CVE-2025-30871
Patch
CWE-98
High · CVSS 7.5
EPSS 0.9% (56th pct)2025-03-27
WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
CVE-2024-10606
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.3% (22th pct)2024-11-23
WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37944
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (20th pct)2024-07-20
WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability
CVE-2024-32798
Patch
CWE-862
High · CVSS 7.5
EPSS 0.3% (27th pct)2024-06-09
WordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerability
CVE-2024-30504
Patch
CWE-89
High · CVSS 7.6
EPSS 0.6% (44th pct)2024-03-29
WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability
CVE-2024-30502
Patch
CWE-89
Critical · CVSS 9.8
EPSS 2.3% (81th pct)2024-03-29
Medium vulnerability · 2022-01-03
CVE-2021-24680
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.6% (45th pct)2022-01-03

Common weakness types

The CWE weakness categories most often found in wptravelengine WP Travel Engine CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many wptravelengine WP Travel Engine CVEs were published each year.

2022

1

2024

5

2025

5

2026

2

Other wptravelengine products

Browse vulnerabilities for other products by wptravelengine.

WP Travel Engine – Tour Booking Plugin – Tour Operator Software6 CVEs Travel Monster2 CVEs Travel Booking1 CVEs WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor1 CVEs WP Travel Engine WordPress plugin1 CVEs

All wptravelengine vulnerabilities

Frequently asked questions

Common questions about wptravelengine WP Travel Engine vulnerabilities.

How many CVEs does wptravelengine WP Travel Engine have?: wptravelengine WP Travel Engine has 13 published CVE records since 2022.
How many wptravelengine WP Travel Engine CVEs are in CISA KEV?: None of wptravelengine WP Travel Engine's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wptravelengine WP Travel Engine vulnerabilities?: No wptravelengine WP Travel Engine CVEs currently have a tracked public exploit in this dataset.
Which versions of wptravelengine WP Travel Engine are affected?: 41 distinct wptravelengine WP Travel Engine versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wptravelengine WP Travel Engine CVEs?: wptravelengine WP Travel Engine's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical wptravelengine WP Travel Engine vulnerabilities are there?: wptravelengine WP Travel Engine has 3 critical and 6 high-severity CVEs.
What is the average severity of wptravelengine WP Travel Engine CVEs?: The average CVSS base score across wptravelengine WP Travel Engine's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wptravelengine WP Travel Engine vulnerabilities

Monitor new wptravelengine WP Travel Engine vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

5.9.2

1 CVE

6.2.21 CVE

6.7.111 CVE

6.8.01 CVE