CVE-2026-49078

WordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerability

Unauthenticated Other Vulnerability Type in WP Travel Engine <= 6.7.10 versions.

We have discovered 1,064 live websites that are affected by CVE-2026-49078.

Run a Free Instant Scan



Affected Software

Product  Wp Travel Engine
Category Wordpress Plugins
Vulnerable Domains1,064 live websites (49% of Wp Travel Engine install base)
Vulnerable Versions
  • from 0 through 6.7.10
Vulnerable Versions Count101 versions ( 91% of all versions)


Common Weakness Enumeration

CWE-1284 Improper Validation of Specified Quantity in Input



Details

  • Published - Jun 15, 2026
  • Updated - Jun 16, 2026

Credits

  • dodoh4t | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-49078
United States269 websites


Germany85 websites
India79 websites
GB57 websites
Italy48 websites
Cyprus43 websites
France40 websites
Poland27 websites
Indonesia26 websites
Russia24 websites

Website Distribution by TLD

Number of websites using CVE-2026-49078
.com656 websites
.it33 websites
.org19 websites
.pl19 websites
.net16 websites
.ru16 websites
.com.br15 websites
.co.uk12 websites
.de10 websites
.nl9 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-49078

Top websites that are affected by CVE-2026-49078. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***************.com Singapore***,***
*******.com United States***,***
*********.org United States***,***
***********.co United States***,***
******.vn Vietnam*,***,***
**********.com United States*,***,***
*******************.com South Africa*,***,***
****************.org United States*,***,***
********************.**.uk GB*,***,***
*****************.it Italy*,***,***
See full domain list

FAQ

CVE-2026-49078 is Improper Validation of Specified Quantity in Input in Wp Travel Engine
A total of 1,064 websites have been identified as vulnerable to CVE-2026-49078, based on global website indexing conducted by WebTechSurvey.
The Wp Travel Engine is affected by the CVE-2026-49078 vulnerability.
Wp Travel Engine versions up to and including 6.7.10 are vulnerable to CVE-2026-49078.