Skip to content

Shinetheme Traveler vulnerabilities

hclsoftware travelerWordPress Traveler theme <= 3.2.9 - SQL Injection vulnerabilityCVE-2026-939479.3 CriticalOctober 9, 2026
hclsoftware travelerWordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerabilityCVE-2026-254499.8 CriticalMarch 18, 2026
hclsoftware travelerWordPress Traveler theme < 3.2.8 - SQL Injection vulnerabilityCVE-2026-243678.5 HighJanuary 22, 2026
hclsoftware travelerWordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerabilityCVE-2025-679176.5 MediumJanuary 8, 2026
hclsoftware travelerWordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerabilityCVE-2025-643738.1 HighDecember 18, 2025
hclsoftware travelerWordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-643727.1 HighDecember 18, 2025
hclsoftware travelerWordPress Traveler theme < 3.2.6 - SQL Injection vulnerabilityCVE-2025-643718.5 HighDecember 18, 2025
shinetheme traveler option treeWordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerabilityCVE-2025-493002.7 LowDecember 16, 2025
hclsoftware travelerWordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerabilityCVE-2025-630285.3 MediumDecember 9, 2025
hclsoftware travelerWordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-590127.1 HighSeptember 26, 2025
hclsoftware travelerWordPress Traveler Theme < 3.2.3 - Arbitrary Content Deletion VulnerabilityCVE-2025-590117.5 HighSeptember 26, 2025
hclsoftware travelerWordPress Traveler theme < 3.2.2 - SQL Injection VulnerabilityCVE-2025-527149.3 CriticalJuly 16, 2025
hclsoftware travelerWordPress Traveler theme < 3.2.1 - Broken Access Control vulnerabilityCVE-2025-267338.2 HighMarch 27, 2025
hclsoftware travelerWordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerabilityCVE-2025-268739.0 CriticalMarch 27, 2025
hclsoftware travelerWordPress Traveler theme < 3.2.1 - SQL Injection vulnerabilityCVE-2025-268989.3 CriticalMarch 27, 2025
hclsoftware travelerWordPress Traveler theme < 3.2.1 - Broken Access Control vulnerabilityCVE-2025-269567.6 HighMarch 27, 2025
notfound traveler codeWordPress Traveler Code plugin < 3.1.3 - Subscriber+ Arbitrary SQL Execution vulnerabilityCVE-2025-227008.5 HighFebruary 4, 2025
notfound traveler codeWordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerabilityCVE-2025-226999.0 CriticalFebruary 4, 2025
notfound traveler layout essential for elementorWordPress Traveler Layout Essential For Elementor plugin < 1.4 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2025-227015.4 MediumFebruary 3, 2025