WP Travel Gutenberg Blocks vulnerabilities

2 known vulnerabilities in WP Travel Gutenberg Blocks from WP Travel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  WP Travel Gutenberg Blocks: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-54808Jun 17, 2026WP Travel

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.

• 8.1 High severity

  WP Travel Gutenberg Blocks: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-53207Aug 20, 2025WP Travel

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks allows PHP Local File Inclusion.This issue affects WP Travel Gutenberg Blocks: from n