VYPR

Tour Master

by WordPress

CVEs (1)

  • CVE-2024-13369MedFeb 18, 2025
    risk 0.42cvss 6.5epss 0.00

    The Tour Master - Tour Booking, Travel, Hotel plugin for WordPress is vulnerable to time-based SQL Injection via the ‘review_id’ parameter in all versions up to, and including, 5.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient…