CVE Intelligence

GoodLayers Tourmaster vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting GoodLayers Tourmaster: 2 record(s), with affected versions and fixes.

CVE-2026-28166 High · 7.1 CWE-79 Aug 24, 2026
WordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.
CVE-2025-69133 High · 7.5 CWE-98 Jul 2, 2026
WordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability
Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions.