Travel & Tours Meta Search
Travel & Tours Meta Search has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; none of them are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Missing Authorization, SQL Injection.
None of the 3 issues recorded for Travel & Tours Meta Search have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, most of them (2) reported by CraCkEr. Travel & Tours Meta Search is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2023-54359Travel & Tours Meta Search <= 2.3 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records
Travel & Tours Meta Search
Author
Travon WP
Travon Travel Plugin allows your customers to input their travel requirements and send them to you via email. It functions as a lead management system integrated with CRM. Subsequently, you can reach out to the customer, invoice them for the services, and proceed to issue the requested services. Easy upgrade the plugin to a booking engine or connect the prefered supplier, consolidator, GDS or Bedbanks. Scale as you grow! Preview and Setup Documentations Preivew Meta Search Portal ShortCodes [travon_searchBox] Shortcodes for the search box Integration with Existing WordPress Theme Login to your WordPress Admin Use the [travon_searchBox] to create the searchbox in your home page, somewhere on banner. Its Done! You can now browse the page and search. if you face any issue, you can WhatsApp our Travel Meta Support Team at +91 8882170162 Find us on Themeforest.net – Travel Meta Search WordPress Travon Theme, the premium compatible theme for adivaha plugins with default Travel Meta Search Engine. Buy from Themeforest.net or Buy from TemplateMonster.com Third Party API Integrations Need more power? Connect the premium plugin with the supplier of your choice under your contracting and use your direct connections for real-time bookings. Few of the suppliers pre-integrated are: Amadeus (Provider) Amadeus (Self Service and Enterprise) Travelport Galileo AirArabia (NDC) TravelFusion (NDC) LIFT Airlines (NDC) Mahan Airlines (NDC) BADR Airlines (NDC) FlyDubai (NDC) AirGateway (NDC Platform) Hotelbeds/Bedsonline/GTA Travel Boutique Online (TBO) RateHawk Flyshop SAN Travels VIA.com KIWI Flights Duffel Mondee Holdings (TripPro) TravelPayouts Restel Viator (TripAdvisor) GetYourGuide Restel Rezlive Musement EaseMyTrip AirIQ GoFlySmart MystiFly Bridgify Agoda Cartrawler Passport Online Cruises PARTO CRS [and Counting …] Support Drop us your questions or need assistance Travon contact or your can email us your questions directly at travon@thewebconz.com Follow Us Official Website – https://www.travon-wp.com/ Facebook Page – https://www.facebook.com/profile.php?id=61582450888789 Instagram Account – https://www.instagram.com/travon.wp.official/ Linkedin Account – https://www.linkedin.com/company/travon-wp/ YouTube – https://www.youtube.com/@Travon-WP-official Themeforest.net – https://themeforest.net/item/travon-tour-and-hotel-booking-wordpress-theme/44265539
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C