9.3
Critical
CVE-2025-52714 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows SQL Injection.This issue affects Traveler: from n/a through < 3.2.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Traveler 3.2 | earliest → 3.2.2 | No fix stated |
Other CVEs of Traveler
The 15 CVEs of Traveler →
CVE-2026-93947
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme…
9.3
Critical
CVE-2026-25449
Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue…
9.8
Critical
CVE-2026-24367
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme…
8.5
High
CVE-2025-67917
Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access…
6.5
Medium