shinetheme CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM shinetheme CVE published 2026-01-08

CVE-2025-67917

A Missing Authorization vulnerability exists in the Traveler theme, affecting versions from n/a through 3.2.6. This issue allows for Exploiting Incorrectly Configured Access Control Security Levels, with a CVSS score of 6.5 and a severity of MEDIUM. The vulnerability has been identified in the Traveler theme, and defenders should assess exposure and prioritize updating to a secure version. The CVE record [truncated]