CVE-2025-67917

MediumCVSS 6.5

Published: 08/01/2026(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

19th percentile - higher than 19% of all known CVEs

Summary

Missing Authorization vulnerability in shinetheme Traveler allows exploiting incorrectly configured access control security levels. This issue affects Traveler from n/a through <= 3.2.6.

Risk Assessment

Risk of unauthorized access to functionality that should be protected, potentially leading to data integrity issues or unauthorized actions.

Recommendation

It is recommended to update the Traveler theme to the latest available version if a patch is available, and to review access control configuration.

Other vulnerabilities in Traveler

CVE-2025-63028Medium
The Traveler theme contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 3.2.6.

Original NVD description (English source)

Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Traveler: from n/a through <= 3.2.6.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS