Togo – Travel & Tour Booking WordPress Theme

Togo – Travel & Tour Booking WordPress Theme has 5 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 5 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 5 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (40%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.

Every one of the 5 issues recorded for Togo – Travel & Tour Booking WordPress Theme has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Tran Nguyen Bao Khanh.

01234567891011.10.2025Today11.10.20256.1Togo < 1.0.4 - Reflected Cross-Site Scripting CVSS 6.1 · 11.10.20255.3Togo – Travel & Tour Booking WordPress Theme theme < 1.0.4 - Missing Authorization CVSS 5.3 · 11.10.20254.3Togo < 1.0.4 - Missing Authorization CVSS 4.3 · 11.10.20258.8Togo < 1.0.4 - Authenticated (subscriber+) Privilege Escalation CVSS 8.8 · 11.10.20257.5Togo < 1.0.4 - Authenticated (Subscriber+) PHP Object Injection CVSS 7.5 · 11.10.2025

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

5

Get automatic notifications for all Togo – Travel & Tour Booking WordPress Theme vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2025-62034

Togo < 1.0.4 - Authenticated (subscriber+) Privilege Escalation

Read the full analysis

Vulnerability Records

5 records
Showing 1–5 of 5 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C