All products
tourmaster
WordPress · Plugin9 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| Tour Master - Tour Booking, Travel, Hotel <= 5.4.9 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-28166 |
tourmaster |
WordPress |
High
|
No fix reported |
|
| Tourmaster <= 5.4.8 - Unauthenticated Information ExposureCVE-2026-14240 |
tourmaster |
WordPress |
Medium
|
Fix reported |
|
| Tour Master - Tour Booking, Travel, Hotel < 5.4.8 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-14239 |
tourmaster |
WordPress |
High
|
Fix reported |
|
| Tour Master - Tour Booking, Travel, Hotel <= 5.4.5 - Authenticated (Subscriber+) Local File InclusionCVE-2025-69133 |
tourmaster |
WordPress |
High
|
No fix reported |
|
| Tourmaster <= 5.3.8 - Unauthenticated Local File InclusionCVE-2025-48292 |
tourmaster |
WordPress |
Critical
|
Fix reported |
|
| Tourmaster < 5.4.1 - Reflected Cross-Site ScriptingCVE-2025-32923 |
tourmaster |
WordPress |
Medium
|
Fix reported |
|
| Tour Master - Tour Booking, Travel, Hotel <= 5.3.4 - Reflected Cross-Site ScriptingCVE-2024-12400 |
tourmaster |
WordPress |
Medium
|
Fix reported |
|
| Tour Master - Tour Booking, Travel, Hotel <= 5.3.7 - Authenticated (Subscriber+) SQL Injection via review_id ParameterCVE-2024-13369 |
tourmaster |
WordPress |
Medium
|
Fix reported |
|
| Tour Master - Tour Booking, Travel, Hotel < 5.3.4 - Unauthenticated Stored Cross-Site Scripting via Room BookingCVE-2024-11356 |
tourmaster |
WordPress |
High
|
Fix reported |
|
