8.5
High
CVE-2026-24367 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through < 3.2.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Traveler 3.2 | earliest → 3.2.8 | No fix stated |
Other CVEs of Traveler
The 15 CVEs of Traveler →
CVE-2026-93947
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme…
9.3
Critical
CVE-2026-25449
Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue…
9.8
Critical
CVE-2025-67917
Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access…
6.5
Medium
CVE-2025-64373
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
8.1
High