Jetmonsters Getwid – Gutenberg Blocks

10 CVEs affecting Jetmonsters Getwid – Gutenberg Blocks. Latest disclosed: 2024-12-04. Critical: 0, High: 1.

Top CVEs affecting Jetmonsters Getwid – Gutenberg Blocks
CVESeverityScorePublishedSummary
CVE-2023-1895High8.52023-06-09The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Server Side Request Forgery via the get_remote_content REST API endpoint in versions up to…
CVE-2024-5020Medium6.42024-12-04Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in…
CVE-2024-10872Medium6.42024-11-20The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template-post-custom-field` block in all versions up t…
CVE-2024-3588Medium6.42024-05-02The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block in all versions up to, and inc…
CVE-2024-1948Medium6.42024-04-09The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block content in all versions up to, and including, 2.0…
CVE-2024-6489Medium5.32024-07-20The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_google_api_k…
CVE-2023-6963Medium5.32024-02-05The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it possible for unauthen…
CVE-2024-6491Medium4.32024-07-20The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mailchimp_api_ke…
CVE-2023-6959Medium4.32024-02-05The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the recaptcha_api_ke…
CVE-2023-1910Medium4.32023-06-09The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the get_remote…