Read the docs

WP Travel Kit

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WP Travel Kit records in CISA KEV

No WP Travel Kit vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-38433 CVE-2024-58349 · GHSA-976h-hgxf-4vrc

WordPress Theme Travelscape 1.0.3 Arbitrary File Upload

Priority HIGH 81

WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00674 Published 2026-06-08 No fix listed CWE-434
TI-2023-30626 CVE-2023-54352 · GHSA-mc6x-cw9h-wfr5

WordPress Seotheme Remote Code Execution Unauthenticated

Priority HIGH 81

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00613 Published 2026-06-08 No fix listed CWE-306
Open these records in search →