CVE-2025-1771 | ShineTheme Travel Booking WordPress Theme up to 3.1.8 on WordPress hotel_alone_load_more_post style filename control
A vulnerability classified as critical has been found in ShineTheme Travel Booking WordPress Theme up to 3.1.8 on WordPress. This affects the function hotel_alone_load_more_post. The manipulation of the argument style leads to improper control of filename for include/require statement in php program ('php remote file inclusion').
This vulnerability is uniquely identified as CVE-2025-1771. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.