CVE-2025-64371: WordPress Traveler theme < 3.2.6 - SQL Injection vulnerability
Published Dec 18, 2025
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through < 3.2.6.
Affected Software
1 affected component
wordpress/traveler<3.2.6
Event History
Dec 18, 2025
CVE Published
via MITRE·07:22 AM
Data Sourced
via MITRE·07:22 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-64371?
CVE-2025-64371 has a high severity rating due to its potential for exploitation through SQL Injection.
2
How do I fix CVE-2025-64371?
To fix CVE-2025-64371, update the Traveler theme to version 3.2.6 or later.
3
What type of vulnerability is CVE-2025-64371?
CVE-2025-64371 is an SQL Injection vulnerability that allows for Blind SQL Injection exploitation.
4
Which versions of Traveler are affected by CVE-2025-64371?
CVE-2025-64371 affects all Traveler versions prior to 3.2.6.
5
What are the potential consequences of CVE-2025-64371?
The exploitation of CVE-2025-64371 may lead to unauthorized access to the database and exposure of sensitive data.