What’s Vulnerable › Products

WP Travel Engine vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your WP Travel Engine version is affected

Latest WP Travel Engine vulnerabilities

• CVE-2026-16737 — WP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cart (CVSS 5.3)
• CVE-2026-12501 — WP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification (CVSS 5.3)
• CVE-2026-12500 — WP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option Update (CVSS 7.5)
• CVE-2026-10834 — WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image (CVSS 4.6)