What’s Vulnerable › Products

tourcms Tour & Activity Operator Plugin for TourCMS vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your tourcms Tour & Activity Operator Plugin for TourCMS version is affected

Latest tourcms Tour & Activity Operator Plugin for TourCMS vulnerabilities

• CVE-2026-1806 — Tour & Activity Operator Plugin for TourCMS <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4)