VYPR

Backpack Traveler

Sign in to watch

by Qodeinteractive

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2025-39490Hig0.538.10.01May 23, 2025Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects Backpack Traveler: from n/a through <= 2.10.2.
CVE-2025-69030Med0.355.40.00Dec 30, 2025Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through <= 2.10.3.