CVE-2026-54808criticalCWE-89

CVE-2026-54808: fallo crítico en WP Travel Gutenberg Blocks

WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability

Publicada el

Seguir esta CVE+ Monitorear WP Travel Gutenberg Blocks

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3epss 0.3%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Productos afectados
WP Travel · WP Travel Gutenberg Blocks
CVEs relacionadas — WP Travel Gutenberg Blocks

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-53207HIGHWordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2024-47627MEDIUMWordPress WP Travel Gutenberg Blocks plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-43284MEDIUMWordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-62063MEDIUMWordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%