Gutentor

10 CVEs across 3 Gutentor products. Browse Gutentor vulnerabilities, severities, and proof-of-concept exploits.

Gutentor products with known CVEs

ProductCVEs
Gutentor7
Gutentor – Gutenberg Blocks – Page Builder For Gutenberg Editor4
Gutentor - Gutenberg Blocks - Page Builder For Gutenberg Editor1
Gutentor CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-2951Medium5.42026-04-23The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and in…
CVE-2025-58680Medium6.52025-09-22Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gu…
CVE-2025-58783Medium4.32025-09-05Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gu…
CVE-2025-4685Medium6.42025-07-21The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attribu…
CVE-2024-5647Medium6.42025-07-03Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versio…
CVE-2025-1986Medium4.12025-04-01The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injecti…
CVE-2025-22293Medium6.52025-01-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gutentor Gutentor gutentor allows DOM-Based XSS.This issu…
CVE-2024-10178Medium6.42024-12-05The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdow…
CVE-2024-5417Medium5.42024-08-29The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outputting them back in a page/post where the block i…
CVE-2024-43308Medium6.52024-08-18Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builde…