WordPress plugin
Tour Operator security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All Tour Operator vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ≤1.4.9Update to 2.0.0 | CVE-2024-9851 |
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
≤1.4.9Update to 2.0.0
Tour Operator: common questions
Does Tour Operator have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Tour Operator: 1 medium. None are known to affect version null.
How do I check which version of Tour Operator I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Tour Operator vulnerability?
CVE-2024-9851, published Nov 20, 2024: LSX Tour Operator <= 1.4.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload. Severity: Medium (CVSS 6.4).
Is any Tour Operator vulnerability listed in CISA KEV?
No. None of the known Tour Operator vulnerabilities is currently listed in the CISA KEV catalog.