Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 30% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

7 of the last 11 four- and five-star reviews came from accounts created within a month of posting the review.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ pongdangmango

   3mo ago

   It is the right plugin that I need. Tourfic plugin itself is good and support team is very supportive as well.

   Read on wp.org ↗
2. ★★★★★ andrecatmax

   9mo ago

   fast and good Support.

   Read on wp.org ↗
3. ★★★★★ radigan

   11mo ago

   One of the best plugins I have used. The configuration/setup is so easy! Being able to turn on my short term rentals using this was awesome! The woo integration makes it so smart and easy to use. Huge fan!!

   Read on wp.org ↗
4. ★★★★★ imprimearabais

   11mo ago

   The team follows back quickly with problems that might appear. Thank you

   Read on wp.org ↗
5. ★★★★★ gazzhost

   11mo ago

   Nice Plugin, definitely fit our need and happy to recommended.

   Read on wp.org ↗
6. ★★★★★ armancse

   11mo ago

   I used this plugin to create a hotel business website for my client, exactly what I was looking for

   Read on wp.org ↗
7. ★★★★★ amoghk6

   11mo ago

   One of the best travel plugins out in the market with frontend dashboard and commission based multivendor functionality.

   Read on wp.org ↗
8. ★★★★★ liteshineau

   11mo ago

   Support was very helpful.They were quick to resolve my issues

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.23.0 Added: Pre-built Bricks template import. Added: Landing page support for Bricks Builder. Added: Traveler/guest details in vendor emails. Added: 18+ Bricks Builder widgets with Tourfic Toolkit plugin. Added: Regression te 2.23.0
2. — Version 2.22.8 Improved: Security enhancements across the plugin. 2.22.8
3. — Version 2.22.7 Improved: Overall system stability and reliability. Improved: Security enhancements across the plugin. 2.22.7
4. — Version 2.22.6 Improved: Security for booking forms and booking workflows. Fixed: Deposit rate calculations during booking. Improved: Performance through optimized script loading. Fixed: Tour package selection reliability during bookin 2.22.6
5. — Version 2.22.5 Added missing parameters to hotel booking cart hooks. 2.22.5
6. — Version 2.22.4 Compatibility: Fully compatible with WordPress v7.0. 2.22.4

14 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.23.1 - Missing Authorization ↗
   2026-08-11 CVE-2026-27999 Missing Authorization Affects <= 2.23.1 Patched in 2.23.2
2. Medium · 5.3 Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Missing Authorization ↗
   2026-07-08 CVE-2026-57392 Missing Authorization Affects <= 2.22.5 Patched in 2.22.6
3. Medium · 4.3 Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Missing Authorization ↗
   2026-07-08 CVE-2026-57395 Missing Authorization Affects <= 2.22.5 Patched in 2.22.6
4. Medium · 6.5 Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Authenticated (Subscriber+) SQL Injection ↗
   2026-06-25 CVE-2026-56064 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.22.5 Patched in 2.22.6
5. High · 7.5 Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter ↗
   2026-06-24 CVE-2026-12937 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.22.7 Patched in 2.22.8
6. Medium · 5.3 Tourfic <= 2.21.4 - Missing Authorization ↗
   2026-03-28 CVE-2026-39543 Missing Authorization Affects <= 2.21.4 Patched in 2.21.5
7. High · 7.2 Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload ↗
   2025-01-24 CVE-2025-24650 Unrestricted Upload of File with Dangerous Type Affects <= 2.15.3 Patched in 2.15.4
8. Medium · 6.5 Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection ↗
   2024-12-24 CVE-2024-12032 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.15.3 Patched in 2.15.4
9. Medium · 4.3 Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions ↗
   2024-09-13 CVE-2024-8860 Missing Authorization Affects <= 2.14.5 Patched in 2.15.0
10. Medium · 4.3 Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions ↗
    2024-08-29 CVE-2024-8319 Cross-Site Request Forgery (CSRF) Affects <= 2.11.20 Patched in 2.11.21
11. Medium · 6.1 Tourfic <= 2.11.7 - Reflected Cross-Site Scripting ↗
    2024-03-18 CVE-2024-29137 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.11.7 Patched in 2.11.8
12. High · 8.8 Tourfic <= 2.11.17 - Authenticated (Subscriber+) PHP Object Injection ↗
    2024-03-18 CVE-2024-29136 Deserialization of Untrusted Data Affects <= 2.11.17 Patched in 2.11.19
13. High · 8.8 Tourfic <= 2.11.15 - Authenticated (Subscriber+) Arbitrary File Upload ↗
    2024-03-18 CVE-2024-29135 Unrestricted Upload of File with Dangerous Type Affects <= 2.11.15 Patched in 2.11.16
14. Medium · 6.4 Tourfic <= 2.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-03-18 CVE-2024-29134 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.11.8 Patched in 2.11.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 7 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-11-04 4K+ → 2K+ down after 1 days in tier
2. 2025-11-03 5K+ → 4K+ down after 85 days in tier
3. 2025-08-10 4K+ → 5K+ up after 41 days in tier
4. 2025-06-30 3K+ → 4K+ up after 4 days in tier
5. 2025-06-26 2K+ → 3K+ up after 29 days in tier
6. 2025-05-28 1K+ → 2K+ up after 31 days in tier
7. 2025-04-27 2K+ → 1K+ down after 4 days in tier
8. 2025-04-23 1K+ → 2K+ up after 2 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Travelly – Tour & Travel Booking Manager for WooCommerce 1K+ installs · 4.6★ · 3 shared tags A
• WP Travel Engine – Tour Booking Plugin – Tour Operator Software 20K+ installs · 4.9★ · 2 shared tags A
• WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor 10K+ installs · 3.6★ · 2 shared tags B
• WP Travel – Ultimate Travel Booking System, Tour Management Engine 4K+ installs · 4.7★ · 2 shared tags A
• Travel Agency Companion – Create Tour & Travel Website Using WP Travel Engine 3K+ installs · 3.7★ · 2 shared tags D
• Travel Booking Toolkit 3K+ installs · 3.6★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin into a readme, a review or a deck. It updates itself.

Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin: 2K+ active installs, 4.1★ (16 reviews). Plugin Pulse (WP Mayor), as of 2026-08-30. https://plugins.wpmayor.com/plugin/tourfic