What’s Vulnerable › Products

Themefic Tourfic vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Themefic Tourfic version is affected

Latest Themefic Tourfic vulnerabilities

• CVE-2026-27999 — WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2026-57395 — WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2026-57392 — WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2026-56064 — WordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2026-39543 — WordPress Tourfic plugin <= 2.21.4 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-24650 — WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability (CVSS 9.1)
• CVE-2024-12032 — Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5)
• CVE-2024-29137 — WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-29136 — WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability (CVSS 8.8)
• CVE-2024-29135 — WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability (CVSS 8.8)
• CVE-2024-29134 — WordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)