Backpack Traveler
Monthly
Insecure direct object references in the Backpack Traveler WordPress theme (versions <= 2.10.3) allow authenticated attackers with low privileges to modify or disrupt resources belonging to other users by manipulating access control keys. The vulnerability does not permit reading of data, only partial integrity and availability impact. EPSS exploitation probability is very low (0.04%) and no active exploitation or public exploit code is confirmed.
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler allows PHP Local File Inclusion.7. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Insecure direct object references in the Backpack Traveler WordPress theme (versions <= 2.10.3) allow authenticated attackers with low privileges to modify or disrupt resources belonging to other users by manipulating access control keys. The vulnerability does not permit reading of data, only partial integrity and availability impact. EPSS exploitation probability is very low (0.04%) and no active exploitation or public exploit code is confirmed.
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler allows PHP Local File Inclusion.7. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.