Skip to content
Sign in
8.1 High

CVE-2025-64373 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in shinetheme Traveler traveler allows PHP Local File Inclusion.This issue affects Traveler: from n/a through < 3.2.6.

Affected products and versions

Product Affected versions Fixed in
Traveler 3.2 earliest → 3.2.6 No fix stated

Other CVEs of Traveler

The 15 CVEs of Traveler →
CVE-2026-93947 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme… 9.3 Critical CVE-2026-25449 Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue… 9.8 Critical CVE-2026-24367 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme… 8.5 High CVE-2025-67917 Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access… 6.5 Medium
Track this CVE