CVE-2025-53207: WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenberg Blocks allows PHP Local File Inclusion. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.0.
Other sources
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks allows PHP Local File Inclusion.This issue affects WP Travel Gutenberg Blocks: from n/a through <= 3.9.0.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53207?
The CVE-2025-53207 vulnerability is classified as a high severity issue due to its potential for local file inclusion, which could lead to unauthorized access to sensitive files.
How do I fix CVE-2025-53207?
To mitigate CVE-2025-53207, update the WP Travel Gutenberg Blocks plugin to a version later than 3.9.0.
What systems are affected by CVE-2025-53207?
CVE-2025-53207 affects all versions of WP Travel Gutenberg Blocks from n/a through 3.9.0.
What type of vulnerability is CVE-2025-53207?
CVE-2025-53207 is an Improper Control of Filename for Include/Require Statement vulnerability that allows PHP Local File Inclusion.
Can CVE-2025-53207 be exploited remotely?
Yes, CVE-2025-53207 can potentially be exploited remotely, allowing an attacker to include files from the server.