Wanderland - Travel Blog

Wanderland - Travel Blog has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, most of them (2) reported by Tran Nguyen Bao Khanh.

01234567891017.04.2025Today17.04.20259.8Wanderland <= 1.7.1 - Unauthenticated Local File Inclusion CVSS 9.8 · 17.04.202503.01.20265.3Wanderland <= 1.5 - Missing Authorization CVSS 5.3 · 03.01.202603.03.20268.1Wanderland - Travel Blog <= 1.5 - Unauthenticated Local File Inclusion CVSS 8.1 · 03.03.2026

Strategic Overview

Avg CVSSHigh
7.7/ 10
Patch Coverage33%
Open

2

Fixed

1

Get automatic notifications for all Wanderland - Travel Blog vulnerabilities before they are exploited.

Most severe open issueCVSS 8.1CVE-2026-22457

Wanderland - Travel Blog <= 1.5 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

3 records
Showing 1–3 of 3 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C