CVE-2026-2437 | wptravelengine WP Travel Engine Plugin up to 6.7.5 on WordPress Shortcode wte_trip_tax cross site scripting

A vulnerability classified as problematic has been found in wptravelengine WP Travel Engine Plugin up to 6.7.5 on WordPress. Impacted is the function wte_trip_tax of the component Shortcode Handler. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-2437. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.