Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: gutentor Component: Gutentor Clear all filters
TI-2025-01731 CVE-2025-1986 · GHSA-9cp2-r8w6-r4vm

Gutentor < 3.4.7 - Admin+ SQL Injection

Priority MEDIUM 52

The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00446 Published 2025-04-01 Fixed in 3.4.7 CWE-89
TI-2024-09438 CVE-2024-10178 · GHSA-w866-77p7-2h8x

Cross-site scripting in Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor

Priority LOW 28

The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 3.3.9 due to i…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00333 Published 2024-12-05 No fix listed CWE-79
TI-2024-05033 CVE-2024-5417 · GHSA-gv48-7crg-mcfr

Gutentor < 3.3.6 - Contributor+ Stored XSS

Priority MEDIUM 58

The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00311 Published 2024-08-29 Fixed in 3.3.6 CWE-79
TI-2024-28960 CVE-2024-43308 · GHSA-5qq5-9453-pj37

Cross-site scripting in Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor allows Stored XSS.This issue affects G…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-08-18 No fix listed CWE-79