Travel Booking WordPress Theme vulnerabilities
3 known vulnerabilities in Travel Booking WordPress Theme from ShineTheme. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Travel Booking WordPress Theme: Improper Control of Filename for Include/Require Statement in PHP Program
The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotel_alone_load_more_post' function 'style' parameter. This makes it possible for unauthenticated attackers to include and execute arbi
- 8.8 High severity
Travel Booking WordPress Theme: Improper Control of Filename for Include/Require Statement in PHP Program
The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.9 via shortcodes. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrar
- 7.5 High severity
Travel Booking WordPress Theme: Improper Neutralization of Special Elements used in an SQL Command
The Travel Booking WordPress Theme theme for WordPress is vulnerable to blind time-based SQL Injection via the ‘order_id’ parameter in all versions up to, and including, 3.1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient p