PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
high·Product Based Web Vulnerabilities·Updated Jan 14, 2026

WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsurl
CostFree
2.2k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2024-29137
7.1
CVSShigh
Exploitable remotely over the internet · no authentication required · user interaction needed.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.7.

Attack Vector
Network
Privileges Req.
None
User Interaction
Required
Affected
Tourficby Themefic
0
Updated Sep 9, 2026View on NVD →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting CVE-2024-29137 Scanner | S4E