CyberSecBulletin

WP Travel Kit vulnerabilities

We track 2 vulnerabilities in WP Travel Kit products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest WP Travel Kit vulnerabilities

  • 9.8 Critical severity

    Travelscape: Unrestricted Upload of File with Dangerous Type

    CVE-2024-58349WP Travel Kit

    WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to

  • 9.8 Critical severity

    Travelscape: Missing Authentication for Critical Functionality

    CVE-2023-54352WP Travel Kit

    WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seothem