WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting

The Tourfic plugin for WordPress is vulnerable to Reflected Cross-Site Scripting XSS in versions up to and including 2.11.7 due to insufficient input sanitization and output escaping in the 'place' parameter. id: CVE-2024-29137 info: name: WordPress Tourfic Plugin = 2.11.7 - Cross-Site Scripting...

CVE-2026-27999

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

EUVD-2026-57940

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999

The CVE-2026-27999 entry concerns the WordPress Tourfic plugin, affected in versions up to 2.23.1, with a Broken Access Control vulnerability affecting subscribers. The connected sources explicitly identify the vulnerability type and affected versions but do not provide technical details on the r...

CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

PT-2026-71505

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Artus KG in WordPress Plugin Tourfic versions = 2.23.1...

CVE-2026-57395

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through = 2.22.5...

CVE-2026-57392

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through = 2.22.5...

CVE-2026-57392 WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through = 2.22.5...

CVE-2026-57392

The CVE-2026-57392 entry concerns the WordPress Tourfic plugin (versions up to 2.22.5) with a Missing Authorization / Broken Access Control vulnerability. The root cause is misconfigured access control, enabling unauthorized access to protected resources or actions. Impact is described as broken ...

CVE-2026-57395

CVE-2026-57395 affects the WordPress Tourfic plugin (versions

CVE-2026-57395 WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through = 2.22.5...

WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Sandesh Gawai in WordPress Plugin Tourfic versions = 2.22.5...

WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ramshath in WordPress Plugin Tourfic versions = 2.22.5...

CVE-2026-56064

Subscriber SQL Injection in Tourfic = 2.22.5 versions...

EUVD-2026-39718

Subscriber SQL Injection in Tourfic = 2.22.5 versions...

CVE-2026-56064 WordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerability

Subscriber SQL Injection in Tourfic = 2.22.5 versions...

CVE-2026-56064

CVE-2026-56064 describes a Subscriber SQL Injection in the WordPress Tourfic plugin versions ≤ 2.22.5. The connected sources confirm the vulnerability type and affected product; no concrete exploit path, mitigation, or fixed version is provided in the supplied documents. CVSSv3.1 metrics show a b...