CVE-2025-7634

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.6.7 via the mode parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on th...

CVE-2025-7634

creationtimestamp| type| source ---|---|--- 2025-10-09 06:03:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2qibd3ptv2s 2025-10-09 06:42:32+00:00| seen| https://gist.github.com/Darkcrai86/feb21292424b5d1ee93a2766e9280b45...