Skip to content
OpenAdvisories

Vendor

WP Travel

14 known vulnerabilities.

Products

WP Travel 6 WP Travel Gutenberg Blocks 5 WP Travel – Ultimate Travel Booking System, Tour Management Engine 2 WP Travel Pro 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.7
    CVE-2026-45218

    WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection.This issue affects WP Travel: from n/a through <= 11.4.0.

    WP Travel WP Travel
  • High 8.1
    CVE-2025-53207

    WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks allows PHP Local File Inclusion.This issue affects WP Travel Gutenberg Blocks: from …

    WP Travel WP Travel Gutenberg Blocks
  • High 7.6
    CVE-2025-22691

    WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through <= 10.1.3.

    WP Travel WP Travel
  • High 7.5
    CVE-2023-47224

    WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through <= 7.8.0.

    WP Travel WP Travel