A vulnerability identified as critical has been detected in Shinetheme Traveler Plugin 3.2.2/3.2.3/3.2.6/3.2.8 on WordPress. This affects an unknown function. This manipulation causes deserialization. This vulnerability is registered as CVE-2026-25449 . Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.