Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin

Vulnerabilities 9Slug tourficLatest version 2.22.2WordPress.org →

Minimum safe version

2.21.5

Update to 2.21.5 or later to address 9 fixable vulnerabilities

Latest available2.22.2 ✓

Medium 4.3

2025-08-26< 2.15.0

Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions

Medium 5.3

2026-04-08< 2.21.5

CVE-2026-39543

Critical 9.1

2025-01-24< 2.15.4

CVE-2025-24650

Medium 6.5

2024-12-25< 2.15.4

CVE-2024-12032

Medium 4.3

2024-08-30< 2.11.21

CVE-2024-8319

High 7.1

2024-03-19< 2.11.8

CVE-2024-29137

Critical 9.9

2024-03-19< 2.11.16

CVE-2024-29135

High 8.5

2024-03-19< 2.11.19

CVE-2024-29136

Medium 6.5

2024-03-19< 2.11.9

CVE-2024-29134