ShineTheme vulnerabilities
24 published CVEs name ShineTheme among the affected products.
- 24Published CVEs24 of them scored
- 9Last 12 monthspublished in the last year
- 7Critical11 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-93947
WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability
Shinetheme · Traveler
Critical9.3 - CVE-2026-25449
WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability
shinetheme · Traveler
Critical9.8 - CVE-2026-24367
WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability
shinetheme · Traveler
High8.5 - CVE-2025-67917
WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
shinetheme · Traveler
Medium6.5 - CVE-2025-64373
WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability
shinetheme · Traveler
High8.1 - CVE-2025-64372
WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability
shinetheme · Traveler
High7.1 - CVE-2025-64371
WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability
shinetheme · Traveler
High8.5 - CVE-2025-49300
WordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerability
Shinetheme · Traveler Option Tree
Low2.7 - CVE-2025-63028
WordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerability
shinetheme · Traveler
Medium5.3 - CVE-2025-59012
WordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
shinetheme · Traveler
High7.1