CVE-2026-42712

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

EUVD-2026-96446

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

CVE-2026-42712

The Qode Tours WordPress plugin (versions

CVE-2026-42712 WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Qode Tours versions = 3.1.3.2...

CVE-2026-76324

CVE-2026-76324 is a stored Cross-Site Scripting (XSS) vulnerability in Splunk Web Tours affecting Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . The root cause is insufficient output encoding when Splunk Web renders tour content and navigation links, allowing a tour selecto...

CVE-2026-65546

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

CVE-2026-65546

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

CVE-2026-65546

CVE-2026-65546 affects the WordPress plugin Qode Tours (versions

CVE-2026-65546 WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

EUVD-2026-53976

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

CVE-2026-65546: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

WordPress Travel & Tours Meta Search plugin <= 2.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by CraCkEr in WordPress Plugin Flights & Hotels Booking WP Plugin versions = 2.3...

WordPress Travel & Tours Meta Search plugin <= 2.3 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by CraCkEr in WordPress Plugin Flights & Hotels Booking WP Plugin versions = 2.3...

WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Plugin Qode Tours versions = 3.1.3.1...

PT-2026-68547

Name of the Vulnerable Software and Affected Versions Qode Tours versions prior to 3.1.3.2 Description The Qode Tours plugin for WordPress contains a flaw allowing unauthenticated attackers to execute SQL Injection. This occurs due to insufficient escaping of user-supplied parameters and a lack o...

PT-2026-57324

Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a victim's Grist origin on a single...

BIT-MOODLE-2025-3635 Moodle: csrf risk in moodle user tours manager allows tour duplication

A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery CSRF attacks...

CVE-2022-35421

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

CVE-2024-2168

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...