Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-54808 EUVD-2026-37713GHSA-jx7m-8j75-c5j3

WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection.

This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.

Affected products

VendorProductAffectedFixed
WP Travel WP Travel Gutenberg Blocks ≤ 3.9.4 —

References