Log in Start free

ShineTheme

Products

ProductCVEsExploitedLatest
Traveler15–Oct 9, 2026
Travel Booking WordPress Theme5–Mar 15, 2025
Traveler Code2–Feb 4, 2025
Traveler Layout Essential For Elementor1–Feb 3, 2025
Traveler Option Tree1–Dec 16, 2025

Exploited and recent CVEs

  • CVE-2026-93947 Critical 9.3 WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability 0.2%
  • CVE-2026-25449 Critical 9.8 WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-24367 High 8.5 WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability 0.2%
  • CVE-2025-67917 Medium 6.5 WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-64373 High 8.1 WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-64372 High 7.1 WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64371 High 8.5 WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability 0.3%
  • CVE-2025-49300 Low 2.7 WordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-63028 Medium 5.3 WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability 0.2%
  • CVE-2025-59012 High 7.1 WordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-59011 High 7.5 WordPress Traveler Theme < 3.2.3 - Arbitrary Content Deletion Vulnerability 0.4%
  • CVE-2025-52714 Critical 9.3 WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability 0.4%
  • CVE-2025-26733 High 8.2 WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability 0.4%
  • CVE-2025-26873 Critical 9.0 WordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-26898 Critical 9.3 WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability 0.4%
  • CVE-2025-26956 High 7.6 WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-1771 Critical 9.8 Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post 0.7%
  • CVE-2025-1773 Medium 6.1 Traveler <= 3.1.8 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-12811 High 8.8 Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.8%
  • CVE-2025-22700 High 8.5 WordPress Traveler Code plugin < 3.1.3 - Subscriber+ Arbitrary SQL Execution vulnerability 0.4%
  • CVE-2025-22699 Critical 9.0 WordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerability 0.4%
  • CVE-2025-22701 Medium 5.4 WordPress Traveler Layout Essential For Elementor plugin < 1.4 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2024-11912 High 7.5 Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_id 0.5%
  • CVE-2024-11926 Medium 6.5 Traveler <= 3.1.6 - Missing Authorization in Several AJAX Actions 0.3%