Travelscape vulnerabilities

2 known vulnerabilities in Travelscape from WP Travel Kit. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Travelscape: Unrestricted Upload of File with Dangerous Type

  CVE-2024-58349Jun 8, 2026WP Travel Kit

  WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to

• 9.8 Critical severity

  Travelscape: Missing Authentication for Critical Functionality

  CVE-2023-54352Jun 8, 2026WP Travel Kit

  WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seothem