Skip to content
OpenAdvisories

Vendor

WP Travel Kit

2 known vulnerabilities.

Products

Travelscape 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-58349

    WordPress Theme Travelscape 1.0.3 Arbitrary File Upload

    WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files t…

    WP Travel Kit Travelscape Web / CMS
  • Critical 9.8
    CVE-2023-54352

    WordPress Seotheme Remote Code Execution Unauthenticated

    WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seothe…

    WP Travel Kit Travelscape