Skip to content
OpenAdvisories

Vendor

cssigniterteam

5 known vulnerabilities.

Products

GutenBee – Gutenberg Blocks 2 Elements Plus! 2 AudioIgniter Music Player 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-9227

    GutenBee <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter

    The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.20.1 via the gutenbee_file_and_ext_json function. This is due to a flawed strpos() substring check that only verifies whether t…

    cssigniterteam GutenBee – Gutenberg Blocks Web / CMS
  • High 7.5
    CVE-2026-8679

    AudioIgniter Music Player <= 2.0.2 - Unauthenticated Insecure Direct Object Reference to 'audioigniter_playlist_id' Parameter

    The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handle_playlist_endpoint() function (hooked to template_redirect) accepting a user-controlled playlist ID via t…

    cssigniterteam AudioIgniter Music Player Web / CMS