ShineTheme vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 202518
3. 20264

Newest CVEs

• CVE-2026-93947

  WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability

  Shinetheme · Traveler

  Critical9.3
• CVE-2026-25449

  WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability

  shinetheme · Traveler

  Critical9.8
• CVE-2026-24367

  WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability

  shinetheme · Traveler

  High8.5
• CVE-2025-67917

  WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability

  shinetheme · Traveler

  Medium6.5
• CVE-2025-64373

  WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability

  shinetheme · Traveler

  High8.1
• CVE-2025-64372

  WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability

  shinetheme · Traveler

  High7.1
• CVE-2025-64371

  WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability

  shinetheme · Traveler

  High8.5
• CVE-2025-49300

  WordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerability

  Shinetheme · Traveler Option Tree

  Low2.7
• CVE-2025-63028

  WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability

  shinetheme · Traveler

  Medium5.3
• CVE-2025-59012

  WordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

  shinetheme · Traveler

  High7.1