WP Travel Engine – Tour Booking Plugin – Tour Operator Software

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

296 searches this plugin appeared in over the last 90 days, 20 listed. 264 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 57% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 20 months ago; the previous band took 22 months to cross, which places it about 90% of the way through.

17 of the last 30 four- and five-star reviews came from accounts created within a month of posting the review, and 8 of those landed between 2026-03-12 and 2026-03-30.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ Francisco Ferreira

   4mo ago

   The team is amazing and always gives fast support to any request I have. They’re the best!

   Read on wp.org ↗
2. ★★★★★ nickhosken

   4mo ago

   I didnt ask a very technical question but I was nevertheless very happy with the quick response I got from my technician, Sagar.

   Read on wp.org ↗
3. ★★★★★ sai2026

   4mo ago

   I am building a website for my business and It wasn’t the first I asked helped from them. The plugin itself is great but the tech support is next level tops! Thank you so much! P.S. I am only half-way through so you know there would be more questions coming! LOL! Cheers!

   Read on wp.org ↗
4. ★★★★★ tracesb59

   4mo ago

   Thank you for your great solution and kind support.

   Read on wp.org ↗
5. ★★★★★ shivamcybercafee

   4mo ago

   This is the best WordPress plugin for travel booking. I have used it. The developer team is very helpful. Thanks specially to Manjil Nepali ji.

   Read on wp.org ↗
6. ★★★★★ sherpax

   4mo ago

   Amazing plugin and awsome support, cheers!

   Read on wp.org ↗
7. ★★★★★ Beulahland83

   5mo ago

   I love this plugin and it is a great one, just few redesign to make it better than viator

   Read on wp.org ↗
8. ★★★★★ onomesandra

   5mo ago

   I just installed the travel plugin theme and its a very nice theme. they also have great support, they helped me resolve the issues i had

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 6.8.3 New Feature: Added a streamlined onboarding experience that can be completed in less than three minutes. New Feature: Added an option to display the pricing type label (e.g., “Per Person”) next to the trip price on trip 6.8.3
2. — Version 6.8.4 New Feature: Added support for setting maximum traveler capacity per pricing category globally across all packages or individually for each package. Fixed: Resolved an issue where Gutenberg block content was not correctl 6.8.4
3. — Version 6.8.5 Fixed: Resolved layout issues in the trip edit form fields for better usability. Security: Patched an Insecure Direct Object Reference (IDOR) vulnerability. See changelog for all versions . 6.8.5
4. — Version 6.8.6 New Feature: Added refunded amount tracking through the Booking Edit section. Improved: Time slot picker now respects the WordPress time format setting (12-hour or 24-hour). Improved: Optimized memory usage during plugin 6.8.6
5. — Version 6.8.7 New Feature: Added an option to make the price category mandatory in Trip Package. New Feature: Added customizable warning and info notice colors in Appearance Settings. New Feature: Added WP Travel Engine-specific capab 6.8.7
6. — Version 6.8.8 Improved: Enhanced Trip Archive price filters to include trips without packages when filtering by higher or lower prices. Improved: Updated TranslatePress email compatibility to support the new database structure. Fixed: 6.8.8

All 23 disclosed vulnerabilities are patched in the current version (6.8.10). Sites still on an older version should update.

1. Patched High · 7.5 WP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attribute ↗
   2026-09-21 CVE-2026-9231 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 6.8.0 Patched in 6.8.1
2. Patched High · 7.5 WP Travel Engine <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter ↗
   2026-08-15 CVE-2026-17087 Missing Authorization Affects <= 6.8.4 Patched in 6.8.5
3. Patched Medium · 5.3 Travel Engine <= 6.8.4 - Insecure Direct Object Reference to Unauthenticated Booking Details Disclosure and Modification ↗
   2026-08-10 CVE-2026-16737 Authorization Bypass Through User-Controlled Key Affects <= 6.8.4 Patched in 6.8.5
4. Patched Medium · 5.3 WP Travel Engine – Tour Booking Plugin – Tour Operator Software < 6.8.2 - Missing Authorization to Unauthenticated Settings Update ↗
   2026-08-05 CVE-2026-12500 Missing Authorization Affects < 6.8.2 Patched in 6.8.2
5. Patched Medium · 5.3 Travel Engine <= 6.8.1 - Unauthenticated Payment Bypass ↗
   2026-07-13 CVE-2026-12501 Missing Authorization Affects <= 6.8.1 Patched in 6.8.2
6. Patched Medium · 4.3 Travel Engine <= 6.8.0 - Authenticated (Subscriber+) Arbitrary Media File Move ↗
   2026-06-16 CVE-2026-10834 External Control of File Name or Path Affects <= 6.8.0 Patched in 6.8.1
7. Patched Medium · 5.3 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.7.10 - Missing Authorization ↗
   2026-06-05 CVE-2026-49078 Missing Authorization Affects <= 6.7.10 Patched in 6.7.11
8. Patched High · 8.1 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.7.12 - Unauthenticated PHP Object Injection ↗
   2026-06-04 CVE-2026-49770 Deserialization of Untrusted Data Affects <= 6.7.12 Patched in 6.8.0
9. Patched Medium · 6.4 WP Travel Engine - Travel and Tour Booking Plugin <= 6.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wte_trip_tax Shortcode ↗
   2026-04-03 CVE-2026-2437 Improper Neutralization of Input During Web Page Generation Affects <= 6.7.5 Patched in 6.7.6
10. Patched Critical · 9.8 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion ↗
    2025-10-08 CVE-2025-7634 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 6.6.7 Patched in 6.6.8
11. Patched Critical · 9.8 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming ↗
    2025-10-08 CVE-2025-7526 Improper Limitation of a Pathname to a Restricted Directory Affects <= 6.6.7 Patched in 6.6.8
12. Patched High · 7.5 WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion ↗
    2025-06-12 CVE-2025-5282 Missing Authorization Affects <= 6.5.1 Patched in 6.5.2
13. Patched High · 8.8 WP Travel Engine <= 6.5.1 - Authenticated (Contributor+) Local File Inclusion ↗
    2025-06-05 CVE-2025-49308 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 6.5.1 Patched in 6.5.2
14. Patched High · 8.8 WP Travel Engine <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion ↗
    2025-03-27 CVE-2025-30871 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 6.3.5 Patched in 6.3.6
15. Patched Critical · 9.8 WP Travel Engine <= 6.3.5 - Unauthenticated Local File Inclusion ↗
    2025-03-27 CVE-2025-30870 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 6.3.5 Patched in 6.3.6
16. Patched Medium · 4.3 WP Travel Engine <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update ↗
    2024-11-22 CVE-2024-10606 Missing Authorization Affects <= 6.2.1 Patched in 6.2.2
17. Patched Medium · 6.4 WP Travel Engine <= 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-07-10 CVE-2024-37944 Improper Neutralization of Input During Web Page Generation Affects <= 5.9.1 Patched in 5.9.2
18. Patched Medium · 5.3 WP Travel Engine <= 5.8.0 - Unauthenticated Price Manipulation ↗
    2024-04-22 CVE-2024-32798 External Control of Assumed-Immutable Web Parameter Affects <= 5.8.0 Patched in 5.8.1
19. Patched Critical · 10.0 WP Travel Engine <= 5.7.9 - Unauthenticated SQL Injection ↗
    2024-03-28 CVE-2024-30502 Improper Neutralization of Special Elements used in an SQL Command Affects <= 5.7.9 Patched in 5.8.0
20. Patched Critical · 9.1 WP Travel Engine <= 5.7.9 - Authenticated (Administrator+) SQL Injection ↗
    2024-03-28 CVE-2024-30504 Improper Neutralization of Special Elements used in an SQL Command Affects <= 5.7.9 Patched in 5.8.0
21. Patched Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects <= 5.7.4 Patched in 5.7.5
22. Patched Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 5.3.8 Patched in 5.3.8
23. Patched Medium · 5.5 WP Travel Engine <= 5.3.0 - Editor+ Stored Cross-Site Scripting ↗
    2021-12-01 CVE-2021-24680 Improper Neutralization of Input During Web Page Generation Affects <= 5.3.0 Patched in 5.3.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 20 languages, 1 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-03-03 10K+ → 20K+ up after 666 days in tier
2. 2023-05-07 9K+ → 10K+ up after 91 days in tier
3. 2023-02-05 8K+ → 9K+ up after 129 days in tier
4. 2022-09-29 7K+ → 8K+ up after 410 days in tier
5. 2021-08-15 8K+ → 7K+ down after 319 days in tier
6. 2020-09-30 9K+ → 8K+ down after 126 days in tier
7. 2020-05-27 10K+ → 9K+ down after 54 days in tier
8. 2020-04-03 9K+ → 10K+ up after 193 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for WP Travel Engine – Tour Booking Plugin – Tour Operator Software into a readme, a review or a deck. It updates itself.

WP Travel Engine – Tour Booking Plugin – Tour Operator Software: 20K+ active installs, 4.9★ (594 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/wp-travel-engine