Deserialization Vulnerability in Traveler Theme by Shinetheme

CVE-2025-26873

What is CVE-2025-26873?

The Traveler theme by Shinetheme is susceptible to a deserialization of untrusted data vulnerability. This security flaw can be exploited through PHP object injection, potentially allowing an attacker to manipulate data objects and gain unauthorized access or execute malicious code. This issue affects versions from n/a through 3.1.8, necessitating immediate attention for all users to safeguard their sites from potential exploitation.

References