CVE-2025-1771

The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotelaloneloadmorepost' function 'style' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

PT-2025-11326

Name of the Vulnerable Software and Affected Versions: Traveler theme for WordPress versions up to, and including, 3.1.8 Description: The issue allows unauthenticated attackers to include and execute arbitrary files on the server via the hotel alone load more post function's style parameter. This...