PatchTheCVEtourfic vulnerabilities and fixes
Recent CVEs affecting tourfic, with upgrade or downgrade steps. 3 tracked.
tourfic has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-01-24. Highest priority: CVE-2025-24650 (score 44/100).
- CVE-2025-24650 CRITICAL 9.1 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web
- CVE-2024-8319 MEDIUM 4.3 UPGRADE The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ
- CVE-2024-12032 MEDIUM 6.5 UPGRADE The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Bookin
FAQ
How do I fix tourfic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tourfic being exploited right now?
None of the tracked tourfic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tourfic CVE should I patch first?
CVE-2025-24650 currently ranks highest (44/100): Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web .