PT-2026-26058 · Shinetheme · Shinetheme Traveler

Phat Rio · Publicado 2026-03-18 · Atualizado 2026-03-18 · CVE-2026-25449

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Shinetheme Traveler versions prior to 3.2.8.1

Description The Shinetheme Traveler software contains a flaw related to the deserialization of untrusted data, which can lead to object injection. This issue allows for potential remote code execution.

Recommendations Update Shinetheme Traveler to version 3.2.8.1 or later.

Correção

RCE

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2026-25449

Produtos afetados

Shinetheme Traveler

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-25449 · Nota de Segurança
• https://reddit.com/r/pwnhub/comments/1rxfc4z/critical_shinetheme_traveler_vulnerability · Publicação no Reddit
• https://patchstack.com/database/wordpress/theme/traveler/vulnerability/wordpress-traveler-theme-3-2-8-php-object-injection-vulnerability?_s_id=cve · Nota
• https://patchstack.com/database/Wordpress/Theme/traveler/vulnerability/wordpress-traveler-theme-3-2-8-php-object-injection-vulnerability?_s_id=cve · Nota
• https://twitter.com/0dayPublishing/status/2034263333633765638 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2034279415102705778 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2034359177121055210 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2034365289127965042 · Publicação no Twitter