Travel Agency

Travel Agency has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 3 issues recorded for Travel Agency has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Travel Agency is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Travel Agency vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Multiple Themes (Various Versions) - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2026-02-11 00:00	Travel Agency <= 1.5.5 - Missing Authorization Travel Agency <= 1.5.5	`CVE-2026-32346`	5.3 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2024-06-29 00:00	Travel Agency <= 1.4.9 - Cross-Site Request Forgery Travel Agency <= 1.4.9	`CVE-2024-37451`	4.3 Medium	Dhabaleshwar Das	Yes
2022-02-14 00:00	Multiple Themes (Various Versions) - Reflected Cross-Site Scripting Travel Agency < 1.4.2	`N/A`	6.1 Medium	WPScanTeam	Yes

Showing 1–3 of 3 reports

Latestv1.5.7

Travel Agency

Author

Rara Themes

5.0(58)

100/100

Last Updated

2026-03-31 (6mo ago)

Active Installs

2,000+

Downloads

324,284

Requires WP

6.2+

Requires PHP

7.4+

Created

2017-12-08 (9y ago)

Travel Agency is a free WordPress theme to create travel online booking website for tour and travel operators and companies. You can add trips, destinations, and trip types, feature travel activities, highlight your specialties and allow visitors to book the trips. The stunning design combined with modern CSS effects and animation will make your visitors feel like they are already on a trip. Travel Agency WordPress theme is speed optimized, translation ready, SEO-friendly and mobile-friendly. Apart from travel booking companies, you can also use Travel Agency theme for travel blogging, hotel, spa, bed and breakfast, luxury resort, reservation, tour operator, tourism, transports and car booking. Check the demo at https://rarathemes.com/previews/?theme=travel-agency , documentation at https://docs.rarathemes.com/docs/travel-agency/, and get support at https://rarathemes.com/support-ticket/.