Skip to content
Noroxi

WP Travel

wp-travel · plugin

Known security vulnerabilities for WP Travel. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

latest Sep 10, 2026

Vulnerabilities

  • CVE-2026-45218

    WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability

    High 7.7

  • CVE-2025-22691

    WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability

    High 7.6

  • CVE-2023-47224

    WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerability

    High 7.5

  • CVE-2026-81796

    WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability

    High 7.3

  • CVE-2024-12067

    WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection

    Medium 6.5

  • CVE-2024-53813

    WordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2024-44039

    WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability

    Medium 5.9

  • CVE-2026-24568

    WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2021-4389

    WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass

    Medium 4.3

← Back to directory