CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-30502

WordPress WP Travel Engine plugin <= 5.7.9 - Unauth. Blind SQL Injection vulnerability

Status: Published
Published: 2024-03-29
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.7.9.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WP Travel Engine WP Travel Engine

Default version status: unaffected

n/a to ≤ 5.7.9affected

References

https://patchstack.com/database/vulnerability/wp-travel-engine/wordpress-wp-travel-engine-plugin-5-7-9-unauth-blind-sql-injection-vulnerability?_s_id=cve ↗