Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GutenKit 2.5.0 Clear all filters
TI-2026-15984 CVE-2026-19699 · GHSA-hj3v-rcw6-wprx

GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure

Priority LOW 13

The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00299 Published 2026-08-20 Fixed in 2.5.0 CWE-863
TI-2026-15982 CVE-2026-19697 · GHSA-wx8r-3g94-mv2j

GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload

Priority LOW 32

The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with the file upload capability, such as Author, to upload a malicious SVG and perform…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2026-08-20 Fixed in 2.5.0 CWE-79