CVE-2026-54808: WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Injection.
This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WP Travel Gutenberg Blocks Pluginto a version that resolves this vulnerability.Fixed in 3.9.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-54808?
CVE-2026-54808 has a critical severity rating of 9.3.
How do I fix CVE-2026-54808?
To fix CVE-2026-54808, update the WP Travel Gutenberg Blocks plugin to version 3.9.5 or later.
What type of vulnerability is CVE-2026-54808?
CVE-2026-54808 is an SQL Injection vulnerability that allows for Blind SQL Injection.
Which version of WP Travel Gutenberg Blocks is affected by CVE-2026-54808?
CVE-2026-54808 affects versions of WP Travel Gutenberg Blocks from n/a up to 3.9.4.
What impact can CVE-2026-54808 have on my website?
Exploitation of CVE-2026-54808 can lead to unauthorized access to sensitive database information.