Skip to content

Known vulnerabilities in ShineTheme Traveler

Is your version affected?

CVE Summary Score Published
CVE-2026-93947 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme… 9.3 Critical Oct 9, 2026
CVE-2026-25449 Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue… 9.8 Critical Mar 18, 2026
CVE-2026-24367 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme… 8.5 High Jan 22, 2026
CVE-2025-67917 Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access… 6.5 Medium Jan 8, 2026
CVE-2025-64373 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High Dec 18, 2025
CVE-2025-64372 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shinetheme… 7.1 High Dec 18, 2025
CVE-2025-64371 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme… 8.5 High Dec 18, 2025
CVE-2025-63028 Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access… 5.3 Medium Dec 9, 2025
CVE-2025-59012 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shinetheme… 7.1 High Sep 26, 2025
CVE-2025-59011 Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access… 7.5 High Sep 26, 2025
CVE-2025-52714 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme… 9.3 Critical Jul 16, 2025
CVE-2025-26733 Missing Authorization vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a through <… 8.2 High Mar 27, 2025
CVE-2025-26873 Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a… 9.0 Critical Mar 27, 2025
CVE-2025-26898 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme… 9.3 Critical Mar 27, 2025
CVE-2025-26956 Missing Authorization vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a through <… 7.6 High Mar 27, 2025

Other ShineTheme products