7.6
Élevée
CVE-2024-30504 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Travel Engine 5.7 | premières → 5.7.9 | Pas de correctif indiqué |
| wp_travel_engine 5.7 | premières → 5.7.9 | Pas de correctif indiqué |
Autres CVE de WP Travel Engine
Les 10 CVE de WP Travel Engine →
CVE-2026-49770
Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions
9.8
Critique
CVE-2026-49078
Unauthenticated Other Vulnerability Type in WP Travel Engine <= 6.7.10 versions
7.5
Élevée
CVE-2025-59574
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel Engine…
6.5
Moyenne
CVE-2025-49308
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
Élevée