Known vulnerabilities in the Traveler theme
17 security advisories have been published for the Traveler theme. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Traveler - PHP Object Injection (CVE-2026-25449) CRITICAL
- Traveler - SQL Injection (CVE-2026-24367) HIGH
- Traveler - Broken Access Control (CVE-2025-67917) MEDIUM
- Traveler - SQL Injection (CVE-2025-64371) HIGH
- Traveler - Path Traversal (CVE-2025-64373) HIGH
- Traveler - Cross-Site Scripting (XSS) (CVE-2025-64372) HIGH
- Traveler - Broken Access Control (CVE-2025-63028) MEDIUM
- Traveler - Broken Access Control (CVE-2025-59011) HIGH
- Traveler - Cross-Site Scripting (XSS) (CVE-2025-59012) HIGH
- Traveler - SQL Injection (CVE-2025-52714) CRITICAL
- Traveler - SQL Injection (CVE-2025-26898) CRITICAL
- Traveler - PHP Object Injection (CVE-2025-26873) CRITICAL
- Traveler - Broken Access Control (CVE-2025-26733) HIGH
- Traveler - Broken Access Control (CVE-2025-26956) HIGH
- Traveler - Path Traversal (CVE-2025-1771) CRITICAL
- Traveler - Cross-Site Scripting (XSS) (CVE-2025-1773) MEDIUM
- Traveler - Path Traversal (CVE-2024-12811) HIGH