← All advisories

High severity7.6NVD Advisory· Published Mar 27, 2025· Updated Apr 23, 2026

CVE-2025-26956

CVE-2025-26956

Description

Missing Authorization vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a through < 3.2.1.

Affected products

2

WordPress/Travelerinferred2 versions
< 3.2.1+ 1 more
- (no CPE)range: < 3.2.1
- (no CPE)range: <3.2.1
Package: https://wordpress.org/themes/traveler

Patches

Vulnerability mechanics

References

1

patchstack.com/database/Wordpress/Theme/traveler/vulnerability/wordpress-traveler-theme-3-1-8-broken-access-control-vulnerability-2nvd

News mentions

0

No linked articles in our index yet.

CVE-2025-26956 · High · VYPR