Travel Booking WordPress Theme
Travel Booking WordPress Theme has 24 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; 23 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 7 high. 2025 was the busiest year with 14 disclosures.
The most common weakness is Cross-Site Scripting, behind 7 of the records (29%). Other recurring categories include Missing Authorization, SQL Injection.
23 of the records (96%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
8 independent researchers contributed these findings, most of them (5) reported by João Pedro Soares de Alcântara.
CVE-2025-63028Traveler <= 3.2.6 - Missing Authorization
Read the full analysisVulnerability Records
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C