Vulnerabilities

TI-2024-10078 CVE-2024-10872 · GHSA-xwgw-3mc5-w4qf

Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template-post-custom-field` block in all versions up to, and including, 2.0.12 due to insufficient input sanitizati…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00333 Published 2024-11-20 No fix listed CWE-79

TI-2024-06018 CVE-2024-6489 · GHSA-3x6q-q5jm-q33x

Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update

LOW 24

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_google_api_key function in all versions up to, and including, 2.0.10.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00298 Published 2024-07-20 No fix listed CWE-862

TI-2024-06020 CVE-2024-6491 · GHSA-xfrr-5gq4-4j32

Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update

LOW 20

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mailchimp_api_key_manage function in all versions up to, and including, 2.0.1…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00378 Published 2024-07-20 No fix listed CWE-862

TI-2024-03344 CVE-2024-3588 · GHSA-pj7c-pvg3-fjr7

Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'

LOW 29

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block in all versions up to, and including, 2.0.7 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00535 Published 2024-05-02 No fix listed CWE-79

TI-2024-01814 CVE-2024-1948 · GHSA-47mh-5593-5c2x

Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content

LOW 29

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block content in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00399 Published 2024-04-09 No fix listed CWE-79

TI-2023-06365 CVE-2023-6963 · GHSA-h2p5-5xgm-h7m9

Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass

LOW 25

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0053 Published 2024-02-05 No fix listed CWE-804

TI-2023-06361 CVE-2023-6959 · GHSA-5qw4-2v86-45mw

Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification

LOW 20

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the recaptcha_api_key_manage function in all versions up to, and including, 2.0.3…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00424 Published 2024-02-05 No fix listed CWE-862

TI-2023-05563 CVE-2023-6042 · GHSA-xjh6-43fr-h892

Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin

HIGH 72

Any unauthenticated user may send e-mail from the site with any title or content to the admin

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00563 Published 2024-01-08 Fixed in 2.0.3

TI-2023-01781 CVE-2023-1895 · GHSA-8cff-2h27-c77x

Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery

MEDIUM 42

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Server Side Request Forgery via the get_remote_content REST API endpoint in versions up to, and including, 1.8.3.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00606 Published 2023-06-09 No fix listed CWE-918

TI-2023-01795 CVE-2023-1910 · GHSA-6r4r-m3h4-xrhw

Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint

LOW 21

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the get_remote_templates function in versions up to, and including, 1.8.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00515 Published 2023-06-09 No fix listed CWE-285

Vulnerabilities

Filters