Lucene search
+L

182 matches found

NVD
NVD
added 2025/04/01 6:15 a.m.22 views

CVE-2025-30870

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

9.8CVSS0.00736EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/01 6:15 a.m.5 views

CVE-2025-30870

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine allows PHP Local File Inclusion. This issue affects WP Travel Engine: from n/a through 6.3.5...

9.8CVSS5.8AI score0.00736EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.27 views

CVE-2025-30870 WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

8.1CVSS0.00736EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 5:31 a.m.8 views

CVE-2025-30870 WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

8.1CVSS7.2AI score0.00736EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 5:31 a.m.73 views

CVE-2025-30870

WP Travel Engine

9.8CVSS7.2AI score0.00736EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.8 views

WordPress plugin WP Travel Engine 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.4AI score0.00736EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.11 views

PT-2025-14059 · WordPress · Wp Travel Engine

Name of the Vulnerable Software and Affected Versions: WP Travel Engine versions through 6.3.5 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion...

9.8CVSS9.3AI score0.00736EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/03/29 11:36 a.m.9 views

CVE-2025-30871

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

7.5CVSS7.2AI score0.00927EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/27 9:42 p.m.11 views

WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin WP Travel Engine versions = 6.3.5...

9.8CVSS7AI score0.00736EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/03/27 11:15 a.m.10 views

CVE-2025-30871

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine allows PHP Local File Inclusion. This issue affects WP Travel Engine: from n/a through 6.3.5...

7.5CVSS5.8AI score0.00927EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/03/27 11:15 a.m.5 views

CVE-2025-30871

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

7.5CVSS7.2AI score0.00927EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/27 11:15 a.m.9 views

CVE-2025-30871

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

7.5CVSS0.00927EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/27 11:10 a.m.9 views

WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin WP Travel Engine versions = 6.3.5...

7.5CVSS7AI score0.00927EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.7 views

CVE-2025-30871 WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

7.5CVSS7.4AI score0.00927EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.20 views

CVE-2025-30871 WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

7.5CVSS0.00927EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.60 views

CVE-2025-30871

CVE-2025-30871 is a WordPress vulnerability in the WP Travel Engine plugin caused by improper control of filenames for include/require statements , enabling unauthenticated access to a PHP Local File Inclusion (LFI). Affected versions: WP Travel Engine

7.5CVSS7.2AI score0.00927EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.10 views

WordPress plugin WP Travel Engine 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS8.5AI score0.00927EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 10:26 a.m.9 views

CVE-2024-12272

The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes it possible for authenticated attackers, with...

8.8CVSS9.6AI score0.00752EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:30 a.m.15 views

CVE-2024-30502

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9...

9.8CVSS8.9AI score0.02248EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:26 a.m.10 views

CVE-2024-30504

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9...

7.6CVSS8.9AI score0.00574EPSS
SaveExploits0References1
Rows per page
Query Builder