CVE-2025-62063: WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerability
Published Oct 22, 2025
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through <= 3.9.2.
Affected Software
1 affected component
WP Travel Gutenberg Blocks<=3.9.2
Event History
Oct 22, 2025
CVE Published
via MITRE·02:32 PM
Data Sourced
via MITRE·02:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-62063?
CVE-2025-62063 is considered a high severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2025-62063?
To fix CVE-2025-62063, update your WP Travel Gutenberg Blocks plugin to the latest version beyond 3.9.2.
3
What systems are affected by CVE-2025-62063?
CVE-2025-62063 affects WP Travel Gutenberg Blocks version 3.9.2 and earlier.
4
What type of vulnerability is CVE-2025-62063?
CVE-2025-62063 is classified as a Cross-site Scripting (XSS) vulnerability.
5
Can CVE-2025-62063 lead to data breaches?
Yes, CVE-2025-62063 can potentially allow attackers to execute malicious scripts, leading to data breaches.