cleantalk
Vulnerabilities and Security Researches

WP Travel Gutenberg Blocks, CVE-2026-54808

CVE, Research URL

CVE-2026-54808

Home page URL

Security reports for WP Travel Gutenberg Blocks

Application

WP Travel Gutenberg Blocks

Published on
Jun 17, 2026
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.
Affected versions
max 3.9.5.
Status
vulnerable
Previous vulnerability researches
Simple Membership Custom Messages (CVE-2025-24660) , Feb 01, 2025
New vulnerability
weMail – Email Marketing, Newsletter, Optin Forms, Subscribers WordPress Plugin (CVE-2026-8089) , Jun 20, 2026
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (CVE-2026-11777) , Jun 19, 2026
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (CVE-2026-11776) , Jun 19, 2026
LearnPress – WordPress LMS Plugin (CVE-2026-8383) , Jun 19, 2026
WP Travel Gutenberg Blocks (CVE-2026-54808) , Jun 19, 2026