Security
فارسی
All products

traveler

WordPress · Theme
25 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Travel Booking WordPress Theme <= 3.2.9 - Unauthenticated SQL InjectionCVE-2026-93947 traveler WordPress High Fix reported
Travel Booking WordPress Theme < 3.2.8.1 - Unauthenticated PHP Object InjectionCVE-2026-25449 traveler WordPress High Fix reported
Traveler < 3.2.8 - Authenticated (Contributor+) SQL InjectionCVE-2026-24367 traveler WordPress Medium Fix reported
Traveler <= 3.2.6 - Missing AuthorizationCVE-2025-67917 traveler WordPress Medium Fix reported
Traveler < 3.2.6 - Unauthenticated Local File InclusionCVE-2025-64373 traveler WordPress High Fix reported
Traveler < 3.2.6 - Reflected Cross-Site ScriptingCVE-2025-64372 traveler WordPress Medium Fix reported
Traveler < 3.2.6 - Authenticated (Subscriber+) SQL InjectionCVE-2025-64371 traveler WordPress Medium Fix reported
Traveler <= 3.2.6 - Missing AuthorizationCVE-2025-63028 traveler WordPress Medium No fix reported
Travel Booking WordPress Theme < 3.2.3 - Reflected Cross-Site ScriptingCVE-2025-59012 traveler WordPress Medium Fix reported
Travel Booking WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary Content DeletionCVE-2025-59011 traveler WordPress Medium Fix reported
Traveler < 3.2.1 - Unauthenticated PHP Object InjectionCVE-2025-26873 traveler WordPress Critical Fix reported
Traveler < 3.2.2 - Unauthenticated SQL InjectionCVE-2025-52714 traveler WordPress High Fix reported
Traveler <= 3.2.0 - Unauthenticated SQL InjectionCVE-2025-26898 traveler WordPress High Fix reported
Traveler <= 3.2.0 - Missing AuthorizationCVE-2025-26956 traveler WordPress Medium Fix reported
Traveler <= 3.2.0 - Missing AuthorizationCVE-2025-26733 traveler WordPress Medium Fix reported
Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via ShortcodeCVE-2024-12811 traveler WordPress High Fix reported
Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_postCVE-2025-1771 traveler WordPress Critical Fix reported
Traveler <= 3.1.8 - Reflected Cross-Site ScriptingCVE-2025-1773 traveler WordPress Medium Fix reported
Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_idCVE-2024-11912 traveler WordPress High Fix reported
Traveler <= 3.1.6 - Missing Authorization in Several AJAX ActionsCVE-2024-11926 traveler WordPress Medium Fix reported