CVE-2026-93947: WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through 3.2.9.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Traveler themeto a version that resolves this vulnerability.Fixed in 3.3
Event History
Frequently Asked Questions
Who can exploit this issue?
The reported vector is network-accessible and requires no privileges or user interaction. An unauthenticated remote attacker could attempt blind SQL injection against an affected Traveler installation.
Which Traveler versions are affected?
Traveler versions through 3.2.9 are affected. The available data does not identify a fixed version.
What is the likely impact of successful exploitation?
The issue is a blind SQL injection vulnerability with high confidentiality impact and low availability impact. The supplied information does not report integrity impact.