CVE-2026-54808

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.

References

https://patchstack.com/database/wordpress/plugin/wp-travel-blocks/vulnerability/wordpress-wp-travel-gutenberg-blocks-plugin-3-9-4-sql-injection-vulnerability?_s_id=cve

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37713

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS