Skip to content
OpenAdvisories
High · 8.1 CVE-2025-53207 EUVD-2025-28497GHSA-gw2x-337g-q8x9

WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability

Published Aug 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks allows PHP Local File Inclusion.This issue affects WP Travel Gutenberg Blocks: from n/a through <= 3.9.0.

Affected products

VendorProductAffectedFixed
WP Travel WP Travel Gutenberg Blocks ≤ 3.9.0 —

References