SH
Vendor
shinetheme
24
CVEs
0
On KEV
1
New 30D
Products
TR9.8
Traveler
shinetheme
15 CVEs0 on KEV1 new
TB9.8
Travel Booking WordPress Theme
ShineTheme
5 CVEs0 on KEV0 new
TC9.0
Traveler Code
shinetheme
2 CVEs0 on KEV0 new
TL5.4
Traveler Layout Essential For Elementor
shinetheme
1 CVEs0 on KEV0 new
TO2.7
Traveler Option Tree
Shinetheme
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-93947 | TR Traveler Shinetheme | 9.3 | Oct 9 | WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability |
| CVE-2026-25449 | TR Traveler shinetheme | 9.8 | Mar 18 | WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability |
| CVE-2026-24367 | TR Traveler shinetheme | 8.5 | Jan 22 | WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability |
| CVE-2025-67917 | TR Traveler shinetheme | 6.5 | Jan 8 | WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability |
| CVE-2025-64373 | TR Traveler shinetheme | 8.1 | Dec 18 | WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability |
| CVE-2025-64372 | TR Traveler shinetheme | 7.1 | Dec 18 | WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64371 | TR Traveler shinetheme | 8.5 | Dec 18 | WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability |
| CVE-2025-49300 | TO Traveler Option Tree Shinetheme | 2.7 | Dec 16 | WordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerability |
| CVE-2025-63028 | TR Traveler shinetheme | 5.3 | Dec 9 | WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability |
| CVE-2025-59012 | TR Traveler shinetheme | 7.1 | Sep 26 | WordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-59011 | TR Traveler shinetheme | 7.5 | Sep 26 | WordPress Traveler Theme < 3.2.3 - Arbitrary Content Deletion Vulnerability |
| CVE-2025-52714 | TR Traveler shinetheme | 9.3 | Jul 16 | WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability |
| CVE-2025-26733 | TR Traveler shinetheme | 8.2 | Mar 27 | WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability |
| CVE-2025-26873 | TR Traveler shinetheme | 9.0 | Mar 27 | WordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerability |
| CVE-2025-26898 | TR Traveler shinetheme | 9.3 | Mar 27 | WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability |
| CVE-2025-26956 | TR Traveler shinetheme | 7.6 | Mar 27 | WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability |
| CVE-2025-1771 | TB Travel Booking WordPress Theme ShineTheme | 9.8 | Mar 15 | Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post |
| CVE-2025-1773 | TB Travel Booking WordPress Theme ShineTheme | 6.1 | Mar 15 | Traveler <= 3.1.8 - Reflected Cross-Site Scripting |
| CVE-2024-12811 | TB Travel Booking WordPress Theme ShineTheme | 8.8 | Feb 27 | Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode |
| CVE-2025-22700 | TC Traveler Code shinetheme | 8.5 | Feb 4 | WordPress Traveler Code plugin < 3.1.3 - Subscriber+ Arbitrary SQL Execution vulnerability |
| CVE-2025-22699 | TC Traveler Code shinetheme | 9.0 | Feb 4 | WordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerability |
| CVE-2025-22701 | TL Traveler Layout Essential For Elementor shinetheme | 5.4 | Feb 3 | WordPress Traveler Layout Essential For Elementor plugin < 1.4 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2024-11912 | TB Travel Booking WordPress Theme ShineTheme | 7.5 | Dec 18 | Traveler <= 3.1.6 - Unauthenticated SQL Injection via order_id |
| CVE-2024-11926 | TB Travel Booking WordPress Theme ShineTheme | 6.5 | Dec 18 | Traveler <= 3.1.6 - Missing Authorization in Several AJAX Actions |