Advisories · Technology

Shinetheme Traveler.

Every CVE that names Shinetheme Traveler among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93947 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability
- Shinetheme Traveler
- SQL injection
Not analysed yet 9 Oct 2026
CVE-2026-25449 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability
- shinetheme Traveler
- Insecure deserialization
Not analysed yet 18 Mar 2026
CVE-2026-24367 CVE record

CVSS 8.5 High

WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability
- shinetheme Traveler
- SQL injection
Not analysed yet 22 Jan 2026
CVE-2025-67917 CVE record

CVSS 6.5 Medium

WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
- shinetheme Traveler
- Broken access control
Not analysed yet 8 Jan 2026
CVE-2025-64373 CVE record

CVSS 8.1 High

WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability
- shinetheme Traveler
- File inclusion
Not analysed yet 18 Dec 2025
CVE-2025-64372 CVE record

CVSS 7.1 High

WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability
- shinetheme Traveler
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2025
CVE-2025-64371 CVE record

CVSS 8.5 High

WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability
- shinetheme Traveler
- SQL injection
Not analysed yet 18 Dec 2025
CVE-2025-63028 CVE record

CVSS 5.3 Medium

WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
- shinetheme Traveler
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-59012 CVE record

CVSS 7.1 High

WordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
- shinetheme Traveler
- Cross-site scripting (XSS)
Not analysed yet 26 Sept 2025
CVE-2025-59011 CVE record

CVSS 7.5 High

WordPress Traveler Theme < 3.2.3 - Arbitrary Content Deletion Vulnerability
- shinetheme Traveler
- Broken access control
Not analysed yet 26 Sept 2025
CVE-2025-52714 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability
- shinetheme Traveler
- SQL injection
Not analysed yet 16 Jul 2025
CVE-2025-26733 CVE record

CVSS 8.2 High

WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability
- shinetheme Traveler
- Broken access control
Not analysed yet 27 Mar 2025
CVE-2025-26873 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

WordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerability
- shinetheme Traveler
- Insecure deserialization
Not analysed yet 27 Mar 2025
CVE-2025-26898 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability
- shinetheme Traveler
- SQL injection
Not analysed yet 27 Mar 2025
CVE-2025-26956 CVE record

CVSS 7.6 High

WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability
- shinetheme Traveler
- Broken access control
Not analysed yet 27 Mar 2025