| CVE-2026-14240 |
The tourmaster WordPress plugin before 5.4.9 writes its order/booking export to a fixed, predictable file inside its…
|
5.3
Medium
|
Aug 6, 2026 |
| CVE-2026-14239 |
The tourmaster WordPress plugin before 5.4.8 does not perform a nonce check when storing a custom-filter label taken…
|
7.1
High
|
Jul 30, 2026 |
| CVE-2024-12400 |
The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes,…
|
7.1
High
|
Jan 30, 2025 |
| CVE-2024-11356 |
The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the…
|
6.1
Medium
|
Jan 6, 2025 |