| CVE-2026-14240 |
The tourmaster WordPress plugin before 5.4.9 writes its order/booking export to a fixed, predictable file inside its…
|
5.3
Moyenne
|
6 août 2026 |
| CVE-2026-14239 |
The tourmaster WordPress plugin before 5.4.8 does not perform a nonce check when storing a custom-filter label taken…
|
7.1
Élevée
|
30 juil. 2026 |
| CVE-2024-12400 |
The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes,…
|
7.1
Élevée
|
30 janv. 2025 |
| CVE-2024-11356 |
The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the…
|
6.1
Moyenne
|
6 janv. 2025 |