Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Mikado-Themes Component: Backpack Traveler Clear all filters
TI-2025-42485 CVE-2025-69030 · GHSA-m5q6-m3r3-f79r

WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 24

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Trave…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0022 Published 2025-12-30 No fix listed CWE-639
TI-2025-26232 CVE-2025-39490 · GHSA-vcf3-77pf-w4hq

WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98