Approved changes feed: RSS · Atom

cpe:2.3:a:wp_travel_kit:travelscape:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWp Travel Kit (4fb4b90c-6958-56db-986c-9ecba477beff)
ProductTravelscape (a7fe6657-247e-5cee-b13e-f04f4a04da8e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-58349 vulnerable 2026-06-08 06:56:14.535297 WordPress Theme Travelscape 1.0.3 Arbitrary File Upload
CRITICAL (9.8)
WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to the theme directory and execute them to achieve remote code execution on the affected WordPress installation.
Published: 2026-06-08T01:55:31.417Z
Updated: 2026-06-08T12:59:54.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-54352 vulnerable 2026-06-08 06:19:40.639692 WordPress Seotheme Remote Code Execution Unauthenticated
CRITICAL (9.8)
WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seotheme/mar.php to execute system commands and upload additional files for persistent access.
Published: 2026-06-08T01:55:29.981Z
Updated: 2026-06-08T16:32:49.210Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.