WP Travel – Ultimate Travel Booking System, Tour Management Engine

77 Quality Score

Active Installs

16/30

With 4,000 active installs it has a real user base, but it is dwarfed by the leading alternative at 20,000 installs, so adoption is moderate rather than mainstream.

Update Freshness

25/25

Updated in July 2026 and tested against WordPress 7.0.1 with a sensible PHP 7.4 floor, the maintenance signals are strong.

User Rating

14/15

162 ratings averaging 94 out of 100 indicate a happy user base with very little public criticism.

Support Health

8/15

Only one support thread exists and it remains unresolved, which is a yellow flag that the support channel may be slow or inactive rather than a sign of widespread problems.

WP Compatibility

15/15

Tested with the latest WordPress release and modern PHP versions, so compatibility risk is low.

Scores higher than 57% of indexed plugins

About

WP Travel is the optimal choice among the WordPress Travel Booking Plugin and Tour Operator to Create Travel and Trekking Websites Without Coding!

Active Installs 3k+

Rating ★★★★½ 4.7/5

Last Updated 2026-09-21 7:35am GMT

Requires WordPress 6.0.0+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

15 known vulnerabilities, all patched

1 High 14 Medium

Most recent: September 8, 2026

View details ▸

WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 12.0.3 - Missing Authorization Medium

September 8, 2026 Patched in ["12.0.4"] CVE-2026-81796

Travel <= 12.0.1 - Missing Authorization Medium

September 7, 2026 Patched in ["12.0.2"] CVE-2026-18042

Travel <= 12.0.1 - Missing Authorization Medium

September 7, 2026 Patched in ["12.0.2"] CVE-2026-13144

Travel <= 12.0.1 - Unauthenticated Insecure Direct Object Reference Medium

September 7, 2026 Patched in ["12.0.2"] CVE-2026-13146

WP Travel – Ultimate Travel Booking System, Tour Management Engine < 11.8.1 - Unauthenticated Payment Bypass Medium

August 4, 2026 Patched in ["11.8.1"] CVE-2026-13143

WP Travel – Ultimate Travel Booking System, Tour Management Engine < 11.8.1 - Authenticated (Subscriber+) Insecure Direct Object Reference Medium

July 30, 2026 Patched in ["11.8.1"] CVE-2026-13145

Travel <= 11.7.0 - Missing Authorization Medium

June 29, 2026 Patched in ["11.7.1"] CVE-2026-11868

WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 11.4.0 - Authenticated (Contributor+) SQL Injection Medium

May 9, 2026 Patched in ["11.5.0"] CVE-2026-45218

Travel <= 11.1.0 - Missing Authorization Medium

January 21, 2026 Patched in ["11.1.1"] CVE-2026-24568

WP Travel <= 10.1.3 - Authenticated (Author+) SQL Injection Medium

January 31, 2025 Patched in ["10.1.4"] CVE-2025-22691

WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection Medium

January 8, 2025 Patched in ["10.0.1"] CVE-2024-12067

WP Travel <= 9.6.0 - Missing Authorization Medium

December 2, 2024 Patched in ["9.7.0"] CVE-2024-53813

WP Travel <= 9.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

September 23, 2024 Patched in ["9.4.0"] CVE-2024-44039

WP Travel <= 7.7.0 - Missing Authorization via Multiple AJAX Actions High

November 3, 2023 Patched in ["7.8.1"] CVE-2023-47224

WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass Medium

March 1, 2021 Patched in ["4.4.7"] CVE-2021-4389

What It Does

WP Travel is a WordPress plugin that lets travel agents, tour operators, and trekking companies build full booking websites without writing code. It handles tour listings, itineraries, pricing, dates, and online reservations directly through the WordPress admin. It functions as an alternative to building a booking system on top of WooCommerce.

Who It's For

This plugin fits small to mid-sized tour operators, trekking outfitters, and travel agencies that want a purpose-built booking system rather than a generic e-commerce setup. It is best suited for sites that sell scheduled departures and fixed itineraries, where the core need is tour inventory plus a checkout flow. Users comfortable with shortcodes and a few template tweaks will get the most out of it.

Who Should Skip It

If you already run a WooCommerce store or need hotel reservations, car rentals, or AI-assisted booking features, this plugin will feel limited and you should look elsewhere. Site owners who need proven, responsive developer support should also skip it given the current support metrics.

The Bottom Line

WP Travel scores 77.73 out of 100, with excellent maintenance and ratings offset by a thin support history and modest install numbers. It is a reasonable pick for a focused tour or trekking site, but operators needing hotel, car, or multi-vertical booking should evaluate WP Travel Engine or Tourfic first. The 4,000 installs and 0 percent support resolution rate mean you should test the demo thoroughly before committing.

Pick this when you want a larger install base (20,000+) and a more established support track record at a slightly higher overall score of 81.46.

Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin 75/100

Pick this if you want a WooCommerce-native booking system that lets you reuse existing payment gateways and shipping-style checkout flows.

Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin 75/100

Pick this if your business spans hotels, car rentals, or AI-driven itineraries alongside tours, since WP Travel does not cover those verticals.

WP Travel Engine – Elementor Widgets 65/100

Pick this companion plugin when you run WP Travel Engine and design pages in Elementor and want ready-made booking widgets.

Travel Booking Toolkit 63/100

Pick this only if you need a lightweight toolkit to extend an existing booking setup rather than a full booking engine.