WP Travel Engine – Tour Booking Plugin – Tour Operator Software

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 57% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

17 of the last 30 four- and five-star reviews came from accounts created within a month of posting the review, and 8 of those landed between 2026-03-12 and 2026-03-30.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ Francisco Ferreira

   1mo ago

   The team is amazing and always gives fast support to any request I have. They’re the best!

   Read on wp.org ↗
2. ★★★★★ nickhosken

   2mo ago

   I didnt ask a very technical question but I was nevertheless very happy with the quick response I got from my technician, Sagar.

   Read on wp.org ↗
3. ★★★★★ sai2026

   2mo ago

   I am building a website for my business and It wasn’t the first I asked helped from them. The plugin itself is great but the tech support is next level tops! Thank you so much! P.S. I am only half-way through so you know there would be more questions coming! LOL! Cheers!

   Read on wp.org ↗
4. ★★★★★ tracesb59

   2mo ago

   Thank you for your great solution and kind support.

   Read on wp.org ↗
5. ★★★★★ shivamcybercafee

   2mo ago

   This is the best WordPress plugin for travel booking. I have used it. The developer team is very helpful. Thanks specially to Manjil Nepali ji.

   Read on wp.org ↗
6. ★★★★★ sherpax

   2mo ago

   Amazing plugin and awsome support, cheers!

   Read on wp.org ↗
7. ★★★★★ Beulahland83

   2mo ago

   I love this plugin and it is a great one, just few redesign to make it better than viator

   Read on wp.org ↗
8. ★★★★★ onomesandra

   3mo ago

   I just installed the travel plugin theme and its a very nice theme. they also have great support, they helped me resolve the issues i had

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 6.8.3 New Feature: Added a streamlined onboarding experience that can be completed in less than three minutes. New Feature: Added an option to display the pricing type label (e.g., “Per Person”) next to the trip price on trip 6.8.3
2. — Version 6.8.4 New Feature: Added support for setting maximum traveler capacity per pricing category globally across all packages or individually for each package. Fixed: Resolved an issue where Gutenberg block content was not correctl 6.8.4
3. — Version 6.8.5 Fixed: Resolved layout issues in the trip edit form fields for better usability. Security: Patched an Insecure Direct Object Reference (IDOR) vulnerability. See changelog for all versions . 6.8.5
4. — Version 6.8.6 New Feature: Added refunded amount tracking through the Booking Edit section. Improved: Time slot picker now respects the WordPress time format setting (12-hour or 24-hour). Improved: Optimized memory usage during plugin 6.8.6
5. — Version 6.8.7 New Feature: Added an option to make the price category mandatory in Trip Package. New Feature: Added customizable warning and info notice colors in Appearance Settings. New Feature: Added WP Travel Engine-specific capab 6.8.7

21 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 WP Travel Engine <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter ↗
   2026-08-15 CVE-2026-17087 Missing Authorization Affects <= 6.8.4 Patched in 6.8.5
2. Medium · 5.3 Travel Engine <= 6.8.4 - Insecure Direct Object Reference to Unauthenticated Booking Details Disclosure and Modification ↗
   2026-08-10 CVE-2026-16737 Authorization Bypass Through User-Controlled Key Affects <= 6.8.4 Patched in 6.8.5
3. Medium · 5.3 WP Travel Engine – Tour Booking Plugin – Tour Operator Software < 6.8.2 - Missing Authorization to Unauthenticated Settings Update ↗
   2026-08-05 CVE-2026-12500 Missing Authorization Affects < 6.8.2 Patched in 6.8.2
4. Medium · 5.3 Travel Engine <= 6.8.1 - Unauthenticated Payment Bypass ↗
   2026-07-13 CVE-2026-12501 Missing Authorization Affects <= 6.8.1 Patched in 6.8.2
5. Medium · 5.3 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.7.10 - Missing Authorization ↗
   2026-06-05 CVE-2026-49078 Missing Authorization Affects <= 6.7.10 Patched in 6.7.11
6. High · 8.1 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.7.12 - Unauthenticated PHP Object Injection ↗
   2026-06-04 CVE-2026-49770 Deserialization of Untrusted Data Affects <= 6.7.12 Patched in 6.8.0
7. Medium · 6.4 WP Travel Engine - Travel and Tour Booking Plugin <= 6.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wte_trip_tax Shortcode ↗
   2026-04-03 CVE-2026-2437 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.7.5 Patched in 6.7.6
8. Critical · 9.8 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion ↗
   2025-10-08 CVE-2025-7634 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 6.6.7 Patched in 6.6.8
9. Critical · 9.8 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming ↗
   2025-10-08 CVE-2025-7526 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 6.6.7 Patched in 6.6.8
10. High · 7.5 WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion ↗
    2025-06-12 CVE-2025-5282 Missing Authorization Affects <= 6.5.1 Patched in 6.5.2
11. High · 8.8 WP Travel Engine <= 6.5.1 - Authenticated (Contributor+) Local File Inclusion ↗
    2025-06-05 CVE-2025-49308 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 6.5.1 Patched in 6.5.2
12. High · 8.8 WP Travel Engine <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion ↗
    2025-03-27 CVE-2025-30871 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 6.3.5 Patched in 6.3.6
13. Critical · 9.8 WP Travel Engine <= 6.3.5 - Unauthenticated Local File Inclusion ↗
    2025-03-27 CVE-2025-30870 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 6.3.5 Patched in 6.3.6
14. Medium · 4.3 WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update ↗
    2024-11-22 CVE-2024-10606 Missing Authorization Affects <= 6.2.1 Patched in 6.2.2
15. Medium · 6.4 WP Travel Engine <= 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-07-10 CVE-2024-37944 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.9.1 Patched in 5.9.2
16. Medium · 5.3 WP Travel Engine <= 5.8.0 - Unauthenticated Price Manipulation ↗
    2024-04-22 CVE-2024-32798 External Control of Assumed-Immutable Web Parameter Affects <= 5.8.0 Patched in 5.8.1
17. Critical · 10.0 WP Travel Engine <= 5.7.9 - Unauthenticated SQL Injection ↗
    2024-03-28 CVE-2024-30502 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 5.7.9 Patched in 5.8.0
18. Critical · 9.1 WP Travel Engine <= 5.7.9 - Authenticated (Administrator+) SQL Injection ↗
    2024-03-28 CVE-2024-30504 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 5.7.9 Patched in 5.8.0
19. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.7.4 Patched in 5.7.5
20. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 5.3.8 Patched in 5.3.8
21. Medium · 5.5 WP Travel Engine <= 5.3.0 - Editor+ Stored Cross-Site Scripting ↗
    2021-12-01 CVE-2021-24680 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.3.0 Patched in 5.3.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 20 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-03-03 10K+ → 20K+ up after 666 days in tier
2. 2023-05-07 9K+ → 10K+ up after 91 days in tier
3. 2023-02-05 8K+ → 9K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor 10K+ installs · 3.6★ · 5 shared tags B
• WP Travel – Ultimate Travel Booking System, Tour Management Engine 4K+ installs · 4.7★ · 5 shared tags A
• Travel Agency Companion – Create Tour & Travel Website Using WP Travel Engine 3K+ installs · 3.7★ · 5 shared tags D
• Travel Booking Toolkit 3K+ installs · 3.6★ · 5 shared tags B
• Yatra – Travel Booking & Tour Operator Software 600+ installs · 4.4★ · 5 shared tags A
• Travelly – Tour & Travel Booking Manager for WooCommerce 1K+ installs · 4.6★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for WP Travel Engine – Tour Booking Plugin – Tour Operator Software into a readme, a review or a deck. It updates itself.

WP Travel Engine – Tour Booking Plugin – Tour Operator Software: 20K+ active installs, 4.9★ (589 reviews). Plugin Pulse (WP Mayor), as of 2026-08-26. https://plugins.wpmayor.com/plugin/wp-travel-engine