What’s Vulnerable › Products

shinetheme Traveler vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your shinetheme Traveler version is affected

Latest shinetheme Traveler vulnerabilities

• CVE-2026-93947 — WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2026-25449 — WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2026-24367 — WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2025-67917 — WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-64373 — WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability (CVSS 8.1)
• CVE-2025-64372 — WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-64371 — WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2025-63028 — WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-59012 — WordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-59011 — WordPress Traveler Theme < 3.2.3 - Arbitrary Content Deletion Vulnerability (CVSS 7.5)
• CVE-2025-52714 — WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability (CVSS 9.3)
• CVE-2025-26956 — WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability (CVSS 7.6)
• CVE-2025-26898 — WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-26873 — WordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerability (CVSS 9.0)
• CVE-2025-26733 — WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability (CVSS 8.2)
• CVE-2025-1773 — Traveler <= 3.1.8 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2025-1771 — Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post (CVSS 9.8)