Skip to content
OpenAdvisories

Product · GoodLayers

Tourmaster

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-28166

    WordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.

    GoodLayers Tourmaster
  • High 7.5
    CVE-2025-69133

    WordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability

    Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions.

    GoodLayers Tourmaster
  • High 8.1
    CVE-2025-48292

    WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File Inclusion.This issue affects Tourmaster: from n/a through <= 5.3.8.

    GoodLayers Tourmaster
  • High 7.1
    CVE-2025-32923

    WordPress Tourmaster plugin < 5.4.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Tourmaster tourmaster allows Reflected XSS.This issue affects Tourmaster: from n/a through < 5.4.1.

    GoodLayers Tourmaster