Vulnerability Search
9.8
Plugin
08.10.2025
<= 6.6.7
WP Travel Engine – Tour Booking Plugin – Tour Operator Software
Unauthenticated Local File Inclusion
9.8
Plugin
08.10.2025
<= 6.6.7
WP Travel Engine – Tour Booking Plugin – Tour Operator Software
Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming
8.8
Plugin
08.10.2025
<= 1.4.0
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme
Authenticated (Subscriber+) Privilege Escalation
7.2
Plugin
08.10.2025
<= 1.6.5
Cookie Notice & Consent
Unauthenticated Stored Cross-Site Scripting
5.4
Plugin
08.10.2025
<= 9.0.46
WP Go Maps (formerly WP Google Maps)
Cross-Site Request Forgery to Plugin Settings Update