Tourfic
Vendor:
First CVE: Mar 19, 2024 · Active for 2 years
10
Total CVEs
More Total CVEs than 89% of tracked products
3.3
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 46% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Tourfic over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 19, 2024
2 years ago
Most Recent CVE
Jul 13, 2026
15 days ago
CVE Severity & Scoring
Tourfic10 CVEs
60%
30%
10%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network10 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None8 (80.0%)
Unknown0 (0.0%)
Required2 (20.0%)
Privileges Required
Low6 (60.0%)
High1 (10.0%)
None3 (30.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-57392MEDIUM Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through | Jul 13, 2026 | 6.5 | 30 | NO | NO |
CVE-2026-56064HIGH Subscriber SQL Injection in Tourfic <= 2.22.5 versions. | Jun 26, 2026 | 8.5 | 30 | NO | NO |
CVE-2026-57395MEDIUM Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through | Jul 13, 2026 | 6.5 | 27 | NO | NO |
CVE-2024-29137MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11. | Mar 19, 2024 | 6.1 | 27 | NO | YES |
CVE-2025-24650CRITICAL Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web Shell to a Web Server.This issue affects Tourfic: from n/a through <= | Jan 24, 2025 | 9.1 | 26 | NO | NO |
CVE-2024-29136HIGH Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.17. | Mar 19, 2024 | 8.8 | 23 | NO | NO |
CVE-2024-29135HIGH Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.15. | Mar 19, 2024 | 8.8 | 23 | NO | NO |
CVE-2026-39543MEDIUM Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through | Apr 8, 2026 | 5.3 | 21 | NO | NO |
CVE-2024-12032MEDIUM The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress is vulnerable to SQL Injection via the 'enquiry | Dec 25, 2024 | 6.5 | 20 | NO | NO |
CVE-2024-29134MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11. | Mar 19, 2024 | 5.4 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
10.0% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Tourfic
Top CWEs
Versions
No cataloged versions.