WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting

The Tourfic plugin for WordPress is vulnerable to Reflected Cross-Site Scripting XSS in versions up to and including 2.11.7 due to insufficient input sanitization and output escaping in the 'place' parameter. id: CVE-2024-29137 info: name: WordPress Tourfic Plugin = 2.11.7 - Cross-Site Scripting...

CVE-2026-39774

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

CVE-2026-39774 WordPress Tourfic Pro plugin <= 1.17.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

CVE-2026-39774 WordPress Tourfic Pro plugin <= 1.17.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

CVE-2026-39774

The Tourfic Pro WordPress plugin, version 1.17.3 and below , is vulnerable to an unauthenticated privilege escalation (CWE-266). This flaw allows an attacker to gain elevated permissions, potentially leading to high impact on confidentiality, integrity, and availability . No specific root cause, ...

EUVD-2026-93024

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

PT-2026-106446

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

WordPress Tourfic Pro plugin <= 1.17.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Tourfic Pro versions = 1.17.3...

CVE-2026-27999

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

EUVD-2026-57940

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999

The CVE-2026-27999 entry concerns the WordPress Tourfic plugin, affected in versions up to 2.23.1, with a Broken Access Control vulnerability affecting subscribers. The connected sources explicitly identify the vulnerability type and affected versions but do not provide technical details on the r...

CVE-2026-27999

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999: Missing Authorization

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

PT-2026-71505

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Artus KG in WordPress Plugin Tourfic versions = 2.23.1...

EUVD-2026-43468

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through = 2.22.5...

EUVD-2026-43465

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through = 2.22.5...

CVE-2026-57395

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through = 2.22.5...