Tourfic Toolkit

Tourfic Toolkit has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 5.0, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for Tourfic Toolkit has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Tourfic Toolkit vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-39585

Travelfic Toolkit <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2026-08-13 00:00	Travelfic Toolkit <= 1.5.1 - Missing Authorization Tourfic Toolkit <= 1.5.1	`CVE-2026-28186`	4.3 Medium	Asim Alshaya	Yes
2025-11-26 00:00	Travelfic Toolkit <= 1.3.3 - Missing Authorization Tourfic Toolkit <= 1.3.3	`CVE-2026-24940`	4.3 Medium	Que Thanh Tuan	Yes
2025-04-16 00:00	Travelfic Toolkit <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Tourfic Toolkit <= 1.2.1	`CVE-2025-39585`	6.4 Medium	João Pedro Soares de Alcântara	Yes

Showing 1–3 of 3 reports