Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-62063 EUVD-2025-35371GHSA-rcjx-w8x7-rh66

WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through <= 3.9.2.

Affected products

VendorProductAffectedFixed
WP Travel WP Travel Gutenberg Blocks ≤ 3.9.2 —

References