Shinetheme vulnerabilities

Products

• Traveler 15
• Travel Booking Wordpress Theme 5
• Traveler Code 2

Newest

• hclsoftware traveler WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability CVE-2026-93947 9.3 CriticalOctober 9, 2026
• hclsoftware traveler WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability CVE-2026-25449 9.8 CriticalMarch 18, 2026
• hclsoftware traveler WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability CVE-2026-24367 8.5 HighJanuary 22, 2026
• hclsoftware traveler WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability CVE-2025-67917 6.5 MediumJanuary 8, 2026
• hclsoftware traveler WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability CVE-2025-64373 8.1 HighDecember 18, 2025
• hclsoftware traveler WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-64372 7.1 HighDecember 18, 2025
• hclsoftware traveler WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability CVE-2025-64371 8.5 HighDecember 18, 2025
• shinetheme traveler option tree WordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerability CVE-2025-49300 2.7 LowDecember 16, 2025
• hclsoftware traveler WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability CVE-2025-63028 5.3 MediumDecember 9, 2025
• hclsoftware traveler WordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-59012 7.1 HighSeptember 26, 2025
• hclsoftware traveler WordPress Traveler Theme < 3.2.3 - Arbitrary Content Deletion Vulnerability CVE-2025-59011 7.5 HighSeptember 26, 2025
• hclsoftware traveler WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability CVE-2025-52714 9.3 CriticalJuly 16, 2025
• hclsoftware traveler WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability CVE-2025-26733 8.2 HighMarch 27, 2025
• hclsoftware traveler WordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerability CVE-2025-26873 9.0 CriticalMarch 27, 2025
• hclsoftware traveler WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability CVE-2025-26898 9.3 CriticalMarch 27, 2025
• hclsoftware traveler WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability CVE-2025-26956 7.6 HighMarch 27, 2025
• shinecommerce traveler, shinetheme travel booking wordpress theme +1 more Traveler <= 3.1.8 - Reflected Cross-Site Scripting CVE-2025-1773 6.1 MediumMarch 15, 2025
• shinecommerce traveler, shinetheme travel booking wordpress theme +1 more Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post CVE-2025-1771 9.8 CriticalMarch 15, 2025
• shinetheme travel booking wordpress theme Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode CVE-2024-12811 8.8 HighFebruary 27, 2025
• notfound traveler code WordPress Traveler Code plugin < 3.1.3 - Subscriber+ Arbitrary SQL Execution vulnerability CVE-2025-22700 8.5 HighFebruary 4, 2025
• notfound traveler code WordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerability CVE-2025-22699 9.0 CriticalFebruary 4, 2025
• notfound traveler layout essential for elementor WordPress Traveler Layout Essential For Elementor plugin < 1.4 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-22701 5.4 MediumFebruary 3, 2025
• shinetheme travel booking wordpress theme Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_id CVE-2024-11912 7.5 HighDecember 18, 2024
• shinetheme travel booking wordpress theme Traveler <= 3.1.6 - Missing Authorization in Several AJAX Actions CVE-2024-11926 6.5 MediumDecember 18, 2024