Mehrere Schwachstellen (CVE-2026-108107, CVE-2026-108109, CVE-2026-108264, CVE-2026-108266, CVE-2026-108267, CVE-2026-108268, CVE-2026-108269, CVE-2026-93947, CVE-2026-94503) in Shinetheme

WordPress - Traveler - CRITICAL - CVE-2026-93947. The Shinetheme Traveler plugin for WordPress contains a vulnerability that allows attackers to conduct Blind SQL Injection attacks. This occurs due to improper handling of user-supplied data within SQL commands, potentially allowing unauthorized access to sensitive database information. Affected versions include all prior to 3.2.9. Users are advised to update immediately to mitigate the risk.
Quelle: securityvulnerability.io