9.3
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection.
This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.
This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.
Basic Information
ID
CVE-2026-54808
Source
Patchstack
Published
Jun 17, 2026 at 13:51
Affected Product
Vendor
WP Travel
Product
WP Travel Gutenberg Blocks
Version
n/a
Affected Versions
WP Travel WP Travel Gutenberg Blocks n/a