Wp Travel

11 CVEs across 2 Wp Travel products. Browse Wp Travel vulnerabilities, severities, and proof-of-concept exploits.

Wp Travel products with known CVEs

ProductCVEs
Wp Travel6
Wp Travel Gutenberg Blocks5
Wp Travel CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54808Critical9.32026-06-17Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Inj…
CVE-2026-45218High7.72026-05-12Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection…
CVE-2026-24568Medium5.32026-01-23Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2025-62063Medium6.52025-10-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.Thi…
CVE-2025-53207High8.12025-08-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenberg Blocks w…
CVE-2025-22691High7.62025-02-03Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This i…
CVE-2023-47224High7.52025-01-02Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2024-53813Medium6.52024-12-06Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2024-44039Medium5.92024-10-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel wp-travel allows Stored XSS.This issu…
CVE-2024-47627Medium6.52024-10-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks all…
CVE-2024-43284Medium6.52024-08-18Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Stored…