Extension WordPress

Vulnérabilités WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor

Cette page rassemble les failles publiées pour WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor, leurs plages de versions affectées et les correctifs signalés dans la base locale.

2Vulnérabilités
0Critiques
2Avec correctif
8,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor

2 fiches

CVE-2025-59574 Moyenne · 6,4
WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor

WP Travel Engine <= 1.4.2 – Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Travel Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…

Versions affectées

*-1.4.2

Correctif

1.4.3

Publication

22/09/2025

CVE-2024-12272 Élevée · 8,8
WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor

WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 – Authenticated (Contributor+) Local File Inclusion

The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes…

Versions affectées

*-1.3.7

Correctif

1.3.8

Publication

24/12/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités