Skip to content
OpenAdvisories

Vendor

Ataur R

5 known vulnerabilities.

Products

GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor 3 GutenKit 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-2573

    GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'

    The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘postBodyCss’ parameter in all versions up to, and including, 2.4.4 due to insufficient input sani…

    Ataur R GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor Web / CMS
  • Medium 5.3
    CVE-2026-15827

    GutenKit <= 2.4.12 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST Endpoints

    The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests REST API endpoints in versions up to, and …

    Ataur R GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor Web / CMS
  • Medium 6.5
    CVE-2025-57900

    WordPress GutenKit Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit gutenkit-blocks-addon allows Stored XSS.This issue affects GutenKit: from n/a through <= 2.4.2.

    Ataur R GutenKit
  • Medium 6.5
    CVE-2025-46253

    WordPress GutenKit plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit gutenkit-blocks-addon allows Stored XSS.This issue affects GutenKit: from n/a through <= 2.2.2.

    Ataur R GutenKit