Skip to content
PluginCanary

Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental

by Themefic · 1,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 15 Oct 2026, fixed in 3.0.2.

81/ 100 Canary Score
Sub-scores for Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 3.0.2. Update to version 3.0.2 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 3.0.2. Update to version 3.0.2 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 11 Aug 2026, fixed in 2.23.2. Update to version 2.23.2 or later.11 Aug 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master22 Mar 2021 to 22 Mar 2021, 1 commits
themefic15 Apr 2021 to 11 Oct 2026, 196 commits
psdtowpservice13 May 2021 to 29 May 2024, 161 commits
kamrul04241 Sep 2021 to 1 Sep 2021, 2 commits
fida0214 Mar 2022 to 22 Jun 2022, 35 commits
mdashikul9 Nov 2022 to 10 Sep 2026, 49 commits

6 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
24 days ago
Releases, 24 months
109
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental
Q1 202422
Q2 202410
Q3 202413
Q4 202422
Q1 202515
Q2 202512
Q3 202513
Q4 202515
Q1 202620
Q2 202610
Q3 20267
Q4 20262

Last release 11 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role6.4<= 3.0.13.0.20
15 Oct 2026Tourfic <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute6.4<= 3.0.13.0.20
11 Aug 2026Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.23.1 - Missing Authorization4.3<= 2.23.12.23.20
8 Jul 2026Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Missing Authorization5.3<= 2.22.52.22.60
8 Jul 2026Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Missing Authorization4.3<= 2.22.52.22.60
25 Jun 2026Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Authenticated (Subscriber+) SQL Injection6.5<= 2.22.52.22.60
24 Jun 2026Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter7.5<= 2.22.72.22.80
28 Mar 2026Tourfic <= 2.21.4 - Missing Authorization5.3<= 2.21.42.21.50
24 Jan 2025Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload7.2<= 2.15.32.15.40
24 Dec 2024Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection6.5<= 2.15.32.15.40
13 Sep 2024Tourfic <= 2.14.5 - Missing Authorization in Multiple Functions4.3<= 2.14.52.15.071
29 Aug 2024Tourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple Functions4.3<= 2.11.202.11.210
18 Mar 2024Tourfic <= 2.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.11.82.11.90
18 Mar 2024Tourfic <= 2.11.15 - Authenticated (Subscriber+) Arbitrary File Upload8.8<= 2.11.152.11.160
18 Mar 2024Tourfic <= 2.11.17 - Authenticated (Subscriber+) PHP Object Injection8.8<= 2.11.172.11.190
18 Mar 2024Tourfic <= 2.11.7 - Reflected Cross-Site Scripting6.1<= 2.11.72.11.80

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.1 from 16 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star11
4 star1
3 star0
2 star2
1 star2

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental
4 May 2026176
11 May 2026293
18 May 20261,196
25 May 20261,131
1 Jun 20261,088
8 Jun 2026378
15 Jun 2026332
22 Jun 20262,956
29 Jun 2026423
6 Jul 20261,122
13 Jul 2026313
20 Jul 2026255
27 Jul 20261,869
3 Aug 2026190
10 Aug 202668
17 Aug 202645
24 Aug 202659
31 Aug 202639
7 Sep 2026685
14 Sep 20261,020
21 Sep 2026371
28 Sep 20261,160
5 Oct 20261,454
12 Oct 20262,045
19 Oct 2026691
26 Oct 2026538
2 Nov 202679

Weekly downloads over the last 4 weeks are 13% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version3.0.2
AuthorThemefic
Added15 Apr 2021
Last updated11 Oct 2026
Active installs1,000+
Requires WordPress5.4
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagscar rental, tour booking, Hotel Booking, Travel booking, multivendor marketplace

Other plugins by this author: Ultra Addons for Contact Form 7, Ultimate Before After Image Slider & Gallery - BEAF, Hydra Booking - Appointment Scheduling & Booking Calendar, Tourfic Toolkit, Instantio - Side Cart & One-Page Checkout for WooCommerce, Ultra Addons for WPForms

Questions

Is Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental still maintained?

Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental was last updated on 11 Oct 2026. Its Canary status is Healthy.

Is Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental safe?

Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental?

The wordpress.org author is Themefic. Recent committers: themefic, mdashikul, psdtowpservice, fida02, kamrul0424. We have recorded no ownership change.

What can I use instead of Tourfic - AI Powered Travel Booking, Hotel Booking & Car Rental?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue