Vulnerabilities (CVE)

Filtered by vendor Qodeinteractive Subscribe
Filtered by product Backpack Traveler
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-39490 1 Qodeinteractive 1 Backpack Traveler 2026-01-29 N/A 8.1 HIGH
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler allows PHP Local File Inclusion. This issue affects Backpack Traveler: from n/a through 2.7.
CVE-2025-69030 1 Qodeinteractive 1 Backpack Traveler 2026-01-29 N/A 5.4 MEDIUM
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through <= 2.10.3.