CVE-2026-39774

Tourfic AI Studio Tourfic Pro

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

8.8 High · CVSS 3.1, patchstack.com

Description

Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

References

patchstack.com/database/wordpress/plugin/tourfic-pro/vulnerability/wordpress-tourfic-pro-plugin-1-17-3-privilege-escalation-vulnerability?_s_id=cve