CVE-2026-54808criticalCWE-89

CVE-2026-54808: falha crítica em WP Travel Gutenberg Blocks

WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability

Publicada em

Seguir esta CVE+ Monitorar WP Travel Gutenberg Blocks

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.3%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
WP Travel · WP Travel Gutenberg Blocks
CVEs relacionadas — WP Travel Gutenberg Blocks

No mesmo produto, das mais perigosas para as menos.

CVE-2025-53207HIGHWordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2024-47627MEDIUMWordPress WP Travel Gutenberg Blocks plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-43284MEDIUMWordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-62063MEDIUMWordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%