CVE-2025-22699

CVE-2025-22699 is an unauthenticated SQL injection vulnerability in the WordPress Traveler Code plugin (Traveler Code) affecting versions up to 3.1.0 (NotFound Traveler Code reference). Multiple sources indicate an unauthenticated arbitrary SQL execution path, with Patchstack specifying a fix in ...

CVE-2025-22699 WordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shinetheme Traveler Code traveler-code.This issue affects Traveler Code: from n/a through 3.1.2...