PT-2025-13399
CVE-2025-26733
·
Published
2025-03-27
·
Updated
2025-03-29
Description by
CVSS 3.1
8.2
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Name of the Vulnerable Software and Affected Versions
Shinetheme Traveler versions 3.1.8 and earlier
Description
The issue is related to a Missing Authorization flaw, which allows attackers to bypass authentication controls. This could potentially lead to unauthorized access. There have been no reported patches for this issue yet.
Recommendations
For versions 3.1.8 and earlier, as a temporary workaround, consider disabling the Shinetheme Traveler theme until a patch is available. Alternatively, restrict access to the theme to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾