Travel Booking

Travel Booking has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for Travel Booking has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Travel Booking is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Travel Booking vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Multiple Themes (Various Versions) - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2026-06-25 00:00	Travel Booking <= 2.2.5 - Authenticated (Subscriber+) Arbitrary File Upload Travel Booking <= 2.2.5	`CVE-2026-56059`	4.3 Medium	Jamaal ahmed	Yes
2026-02-09 00:00	Travel Booking <= 1.3.9 - Missing Authorization Travel Booking <= 1.3.9	`CVE-2026-32486`	5.3 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2022-02-14 00:00	Multiple Themes (Various Versions) - Reflected Cross-Site Scripting Travel Booking < 1.2.3	`N/A`	6.1 Medium	WPScanTeam	Yes

Showing 1–3 of 3 reports

Latestv1.4.1

Travel Booking

Author

WP Travel Engine

3.5(2)

70/100

Last Updated

2026-04-07 (5mo ago)

Active Installs

700+

Downloads

59,012

Requires WP

6.2+

Requires PHP

7.4+

Created

2018-10-05 (8y ago)

Travel Booking is a free WordPress theme to create travel online booking website for tour and travel operators and companies. You can add trips, destinations, and trip types, feature travel activities, highlight your specialties and allow visitors to book the trips. The stunning design combined with modern CSS effects and animation will make your visitors feel like they are already on a trip. Travel Booking WordPress theme is speed optimized, translation ready, SEO-friendly and mobile-friendly. Apart from travel booking companies, you can also use Travel Booking theme for travel blogging, hotel, spa, bed and breakfast, luxury resort, reservation, tour operator, tourism, transports and car booking. Get support at https://wptravelengine.com/support-ticket/.