CVE-2024-37944 WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Travel Engine allows Stored XSS.This issue affects WP Travel Engine: from n/a through 5.9.1...

PT-2024-27849 · WordPress · Wp Travel Engine

Name of the Vulnerable Software and Affected Versions: WP Travel Engine versions n/a through 5.9.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For WP...

WordPress WP Travel Engine plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Manab Jyoti Dowarah Patchstack Alliance in WordPress Plugin WP Travel Engine versions = 5.9.1...

WordPress WP Travel Engine Plugin <= 5.9.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Travel Engine Type Plugin Vulnerable versions = 5.9.1 Fixed in 5.9.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37944 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1b17a1368976 Credits Manab Jyoti Dowarah Required privileg...

CVE-2024-32798

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0...

CVE-2024-32798

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0...

CVE-2024-32798 WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0...

CVE-2024-32798 WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0...

CVE-2024-32798

CVE-2024-32798 is a Missing Authorization vulnerability in the WordPress plugin WP Travel Engine, affecting WP Travel Engine versions from n/a up to and including 5.8.0. The connected enrichment and Red Hat/WordPress records reference a price manipulation impact associated with this vulnerability...

WordPress plugin WP Travel Engine security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-24871 · WordPress · Wp Travel Engine

Name of the Vulnerable Software and Affected Versions: WP Travel Engine versions prior to 5.8.0 Description: The issue is related to a Missing Authorization vulnerability in WP Travel Engine. This vulnerability affects WP Travel Engine versions prior to 5.8.0. Recommendations: For WP Travel Engin...

WordPress WP Travel Engine plugin <= 5.8.0 - Price Manipulation vulnerability

Price Manipulation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Travel Engine versions = 5.8.0...

WordPress WP Travel Engine Plugin <= 5.8.0 is vulnerable to Broken Access Control

Software WP Travel Engine Type Plugin Vulnerable versions = 5.8.0 Fixed in 5.8.1 OWASP Top 10 A5: Security Misconfiguration Classification Broken Access Control CVE CVE-2024-32798 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 429c915534c2 Credits Ananda Dhakal Patchstack...

WP Travel Engine < 5.8.0 - Unauthenticated SQL Injection

Description The WP Travel Engine plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attacke...

CVE-2024-30502

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9...

CVE-2024-30504

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9...

CVE-2024-30502

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9...

CVE-2024-30504

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9...

CVE-2024-30504 WordPress WP Travel Engine plugin <= 5.7.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9...

CVE-2024-30504

CVE-2024-30504 is an SQL injection vulnerability in WP Travel Engine (WordPress plugin) caused by improper neutralization of inputs. Affected: WP Travel Engine versions up to 5.7.9. Status: patched in the Wordfence vulnerability entry; no exploitation details are provided in the connected documen...