WP Travel vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20254
3. 20263

Newest CVEs

• CVE-2026-54808

  WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability

  WP Travel · WP Travel Gutenberg Blocks

  Critical9.3
• CVE-2026-45218

  WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability

  WP Travel · WP Travel

  High7.7
• CVE-2026-24568

  WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability

  WP Travel · WP Travel

  Medium5.3
• CVE-2025-62063

  WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

  WP Travel · WP Travel Gutenberg Blocks

  Medium6.5
• CVE-2025-53207

  WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability

  WP Travel · WP Travel Gutenberg Blocks

  High8.1
• CVE-2025-22691

  WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability

  WP Travel · WP Travel

  High7.6
• CVE-2023-47224

  WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerability

  WP Travel · WP Travel

  High7.5
• CVE-2024-53813

  WordPress WP Travel plugin <= 9.6.0 - Broken Access Control vulnerability

  WP Travel · WP Travel

  Medium6.5
• CVE-2024-44039

  WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability

  WP Travel · WP Travel

  Medium5.9
• CVE-2024-47627

  WordPress WP Travel Gutenberg Blocks plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

  WP Travel · WP Travel Gutenberg Blocks

  Medium6.5