Themefic

Tourfic

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2026-39543

  • EPSS 0.03%
  • Veröffentlicht 08.04.2026 08:30:17
  • Zuletzt bearbeitet 10.04.2026 17:17:09

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through <= 2.21.4.

4.3

CVE-2024-8860

  • EPSS 0.04%
  • Veröffentlicht 26.08.2025 07:15:33
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tf_order_status_email_resend_function, tf_visitor_details_edit_function, tf_checkinout_details_edit_function, tf_order_statu...

9.1

CVE-2025-24650

  • EPSS 0.19%
  • Veröffentlicht 24.01.2025 18:15:39
  • Zuletzt bearbeitet 01.04.2026 17:17:59

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web Shell to a Web Server.This issue affects Tourfic: from n/a through <= 2.15.3.

6.5

CVE-2024-12032

  • EPSS 0.15%
  • Veröffentlicht 25.12.2024 04:15:05
  • Zuletzt bearbeitet 05.06.2025 15:32:16

The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress is vulnerable to SQL Injection via the 'enquiry_id' parameter of the 'tf_enquiry_reply_email_callback' function in al...

8.8

CVE-2024-29136

  • EPSS 0.5%
  • Veröffentlicht 19.03.2024 14:15:09
  • Zuletzt bearbeitet 01.04.2026 16:16:52

Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.17.

6.1

CVE-2024-29137

  • EPSS 7.28%
  • Veröffentlicht 19.03.2024 14:15:09
  • Zuletzt bearbeitet 01.04.2026 16:16:52

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.7.

5.4

CVE-2024-29134

  • EPSS 0.15%
  • Veröffentlicht 19.03.2024 14:15:08
  • Zuletzt bearbeitet 01.04.2026 16:16:51

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.8.

8.8

CVE-2024-29135

  • EPSS 0.6%
  • Veröffentlicht 19.03.2024 14:15:08
  • Zuletzt bearbeitet 01.04.2026 16:16:51

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.15.