Product

WP Travel Engine – Tour Booking Plugin – Tour Operator Software (<= 6.8.0)

1 brief RSS

Local File Inclusion Vulnerability in WP Travel Engine Plugin

An unauthenticated-accessible Local File Inclusion vulnerability in the WP Travel Engine plugin (CVE-2026-9231) allows authenticated contributors to achieve remote code execution by including arbitrary PHP files.

WP Travel Engine – Tour Booking Plugin – Tour Operator Software web-vulnerability lfi wordpress

1r 1t 1c 5m ago