Skip to content
Threat Feed
Subscribe

Product

WP Travel Engine – Tour Booking Plugin – Tour Operator Software (<= 6.8.4)

1 brief RSS
high advisory

Authorization Bypass in WP Travel Engine Plugin

An authorization bypass vulnerability in the WP Travel Engine plugin for WordPress allows unauthenticated attackers to exfiltrate customer booking details by manipulating checkout form parameters.

WP Travel Engine – Tour Booking Plugin – Tour Operator Software
1t 1c