CVE-2026-9231: Local file inclusion in the WP Travel Engine WordPress plugin

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software for WordPress plugin is vulnerable to local file inclusion in all versions up to and including 6.8.0.