WP Travel
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Travel | 6 | – | May 12, 2026 |
| WP Travel Gutenberg Blocks | 5 | – | Jun 17, 2026 |
Exploited and recent CVEs
- CVE-2026-54808 WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability 0.3%
- CVE-2026-45218 WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability 0.2%
- CVE-2026-24568 WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability 0.3%
- CVE-2025-62063 WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-53207 WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability 0.5%
- CVE-2025-22691 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability 0.5%
- CVE-2023-47224 WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerability 0.4%
- CVE-2024-53813 WordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability 0.3%
- CVE-2024-44039 WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-47627 WordPress WP Travel Gutenberg Blocks plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-43284 WordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%