Shinetheme Traveler WordPress Theme Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability exists in the Shinetheme Traveler WordPress theme, versions prior to 3.2.3. This vulnerability allows for arbitrary content deletion, enabling unauthorized users to remove posts, pages, or media from affected websites.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of content, such as posts, pages, or media files, from the WordPress site.

Remediation

Users are advised to update the Shinetheme Traveler WordPress theme to version 3.2.3 or later. Patchstack has also issued a virtual patch to block attacks targeting this vulnerability.