CVE-2025-63028

MediumCVSS 5.3

Published: 09/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

15th percentile - higher than 15% of all known CVEs

Summary

The Traveler theme contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 3.2.6.

Risk Assessment

An attacker may gain unauthorized access to theme functions, potentially leading to site integrity compromise or data leakage.

Recommendation

Update the Traveler theme to the latest version that includes the security fix.

Other vulnerabilities in Traveler

CVE-2025-67917Medium
Missing Authorization vulnerability in shinetheme Traveler allows exploiting incorrectly configured access control security levels. This issue affects Traveler from n/a through <= 3.2.6.

Original NVD description (English source)

Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Traveler: from n/a through <= 3.2.6.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS