WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming vulnerability

Authenticated Subscriber+ Arbitrary File Deletion via File Renaming vulnerability discovered by wesley wcraft in WordPress Plugin WP Travel Engine versions = 6.6.7...

EUVD-2021-11592

Malware in sbrugna...

EUVD-2024-37035

Malicious code in bioql PyPI...

EUVD-2025-9086

Malicious code in bioql PyPI...

EUVD-2024-28422

Malicious code in bioql PyPI...

EUVD-2025-17260

Malicious code in bioql PyPI...

EUVD-2024-36901

Malicious code in bioql PyPI...

EUVD-2024-30584

Malicious code in bioql PyPI...

EUVD-2025-8326

Malicious code in bioql PyPI...

EUVD-2024-50736

Malicious code in bioql PyPI...

EUVD-2024-28424

Malicious code in bioql PyPI...

EUVD-2025-30503

Malicious code in bioql PyPI...

CVE-2025-59574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel Engine WP Travel Engine wte-elementor-widgets allows Stored XSS.This issue affects WP Travel Engine: from n/a through = 1.4.2...

CVE-2025-59574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel Engine WP Travel Engine wte-elementor-widgets allows Stored XSS.This issue affects WP Travel Engine: from n/a through = 1.4.2...

WordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Michael in WordPress Plugin WP Travel Engine versions = 1.4.2...

CVE-2025-59574 WordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel Engine WP Travel Engine allows Stored XSS. This issue affects WP Travel Engine: from n/a through 1.4.2...

CVE-2025-59574

CVE-2025-59574 is a stored XSS vulnerability in WP Travel Engine’s WordPress plugin (WP Travel Engine – Elementor Widgets). The initial detail notes improper neutralization of input during web page generation, enabling Stored XSS on WP Travel Engine versions up to 1.4.2. The CVSS 3.1 vector is AV...

CVE-2025-59574 WordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel Engine WP Travel Engine wte-elementor-widgets allows Stored XSS.This issue affects WP Travel Engine: from n/a through = 1.4.2...

PT-2025-39048

Name of the Vulnerable Software and Affected Versions WP Travel Engine versions through 1.4.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for Cross-site Scripting XSS. This specific instance is a Stored XSS issue, meaning...

WordPress plugin WP Travel Engine 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...