The Traveler Option Tree plugin for WordPress has a vulnerability that allows attackers to retrieve sensitive information stored within the plugin's configuration. Insertion of sensitive data into sent responses can expose confidential data, resulting in a confidentiality breach. This weakness is classified as CWE‑201 Sensitive Information Exposure. The issue affects all versions of the plugin up to and including 2.8 and could allow a non‑authenticated or low‑privilege user with access to the plugin settings to harvest embedded data.

Vendors: shinetheme. Product: Traveler Option Tree – a WordPress custom‑option‑tree plugin. Version range: all released versions up to and including 2.8 are vulnerable. The plugin is installed on WordPress sites using the shinetheme Traveler Option Tree component.

The publicly available CVSS score is 2.7, indicating a low‑severity risk, while the EPSS score is below 1 %, implying a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is through the WordPress administrative interface or plugin API, requiring authenticated access to the plugin’s option management. Because the flaw simply exposes data that has already been injected into response payloads, an attacker would typically need either administrative privileges or be able to view the plugin’s output in the front‑end, and the impact remains limited to confidentiality. No special privileges or network access are required beyond basic access to the vulnerable site.