WordPress Vulnerability Scanner WPSec
Vulnerabilities / Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin

Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin vulnerabilities

Advisories WPSec published for Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental. Other sources may list more. Its attack surface: Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-12 WPSEC-2026-0806 Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Wishlist Shortcode 'type' Attribute Medium 6.4 3.0.2
2026-10-12 WPSEC-2026-0805 Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 3.0.1 - Authenticated (Customer+) Stored Cross-Site Scripting via Improper unfiltered_html Capability Assignment Medium 6.4 3.0.2

License: CC BY 4.0