Shinetheme Traveler WordPress Theme SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Shinetheme Traveler WordPress theme, affecting versions prior to 3.2.2. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized database access and information theft.

Impact

Exploitation of this vulnerability allows for direct interaction with the database, which could be used to steal information.

Remediation

Users are advised to update to version 3.2.2 or later. Patchstack has issued a virtual patch to block attacks until the update is applied.