PT-2026-47236 · Wp Travel Kit · Travelscape

Milad Karimi · Published 2026-06-08 · Updated 2026-06-08 · CVE-2024-58349

NVD

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to the theme directory and execute them to achieve remote code execution on the affected WordPress installation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-58349

Affected Products

Travelscape

References · 3

• 🔥 https://exploit-db.com/exploits/51969 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-58349 · Security Note
• https://vulncheck.com/advisories/wordpress-theme-travelscape-arbitrary-file-upload · Note