WP Travel

Products

ProductCVEsExploitedLatest
WP Travel6–May 12, 2026
WP Travel Gutenberg Blocks5–Jun 17, 2026

Exploited and recent CVEs

  • CVE-2026-54808 Critical 9.3 WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability 0.3%
  • CVE-2026-45218 High 7.7 WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability 0.2%
  • CVE-2026-24568 Medium 5.3 WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62063 Medium 6.5 WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-53207 High 8.1 WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-22691 High 7.6 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability 0.5%
  • CVE-2023-47224 High 7.5 WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerability 0.4%
  • CVE-2024-53813 Medium 6.5 WordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability 0.3%
  • CVE-2024-44039 Medium 5.9 WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-47627 Medium 6.5 WordPress WP Travel Gutenberg Blocks plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-43284 Medium 6.5 WordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%