Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Tourfic — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Tourfic, with AI-generated Chinese analysis, references, and POCs.

Vendor: Themefic

CVE IDTitleCVSSSeverityPublished
CVE-2026-39543 WordPress Tourfic plugin <= 2.21.4 - Broken Access Control vulnerability CWE-862 9.1AICriticalAI2026-04-08
CVE-2025-24650 WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability CWE-434 9.1 Critical2025-01-24
CVE-2024-29134 WordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-03-19
CVE-2024-29135 WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability CWE-434 8.8AIHighAI2024-03-19
CVE-2024-29136 WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability CWE-502 8.5 High2024-03-19
CVE-2024-29137 WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-03-19

All 6 known CVE vulnerabilities affecting Tourfic with full Chinese analysis, references, and POCs where available.