Known Vulnerabilities for Travel Booking by PhysCode
Listed below are 7 of the newest known vulnerabilities associated with "Travel Booking" by "PhysCode".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56059 json | Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-12937 json | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to ... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-6376 json | A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a P... | Not Provided | 2026-04-23 | 2026-04-24 |
| CVE-2026-2437 json | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Stored Cross-Si... | Not Provided | 2026-04-04 | 2026-04-08 |
| CVE-2024-13369 json | The Tour Master - Tour Booking, Travel, Hotel plugin for WordPress is vulnerable to time-based SQL Injection via the ‘revie... | Not Provided | 2025-02-18 | 2026-04-08 |
| CVE-2024-12067 json | The WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is vulnerable to SQL Injection ... | Not Provided | 2025-01-09 | 2026-04-08 |
| CVE-2024-0434 json | The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized ... | Not Provided | 2024-05-29 | 2026-04-08 |