Multiple WordPress Vulnerabilities Affect 20,000+ Travel Sites

Two critical vulnerabilities were identified in the WP Travel Engine, travel booking plugin for WordPress that’s installed on more than 20,000 websites. Both vulnerabilities enable unauthenticated attackers to obtain virtually complete control of a website and are rated 9.8 on the CVSS scale, very close to the highest possible score for critical flaws. WP Travel

Read the full article

Published by searchenginejournal.com