Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ataurr Clear all filters
TI-2026-02197 CVE-2026-2573 · GHSA-5hjr-3m2v-64xv

GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'

Priority LOW 28

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and includin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00261 Published 2026-09-03 No fix listed CWE-79
TI-2026-13309 CVE-2026-15827 · GHSA-phq4-ggcm-gj84

Missing authorization in ataurr GutenKit – Page Builder Blocks, Patterns, and Templates…

Priority LOW 31

The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests RES…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00539 Published 2026-07-23 No fix listed CWE-862
TI-2025-35754 CVE-2025-57900 · GHSA-9c47-735q-757g

WordPress GutenKit Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit gutenkit-blocks-addon allows Stored XSS.This issue affects GutenKit: from n/a through <= 2.4.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00274 Published 2025-09-22 No fix listed CWE-79
TI-2024-08570 CVE-2024-9234 · GHSA-7cmx-277j-7rf8

GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 62

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the install_and_activate_plugin_fro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10446 Published 2024-10-11 No fix listed CWE-862