Skip to content
OpenAdvisories

Vendor

gutentor

8 known vulnerabilities.

Products

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor 5 Gutentor 3
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-2951

    Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML

    The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.5 due to insufficient input sanitization and output escaping. This makes it possible fo…

    gutentor Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Web / CMS
  • Medium 6.5
    CVE-2025-58680

    WordPress Gutentor plugin <= 3.5.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutentor: from n/a through <= 3.5.2.

    gutentor Gutentor
  • Medium 4.3
    CVE-2025-58783

    WordPress Gutentor plugin <= 3.5.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutentor: from n/a through <= 3.5.5.

    gutentor Gutentor
  • Medium 6.4
    CVE-2025-4685

    Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attributes of multiple widgets, in all versions up to, and including, 3.4.8 due to insufficient input sanit…

    gutentor Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Web / CMS
  • Medium 6.4
    CVE-2024-5647

    Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

    Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This make…

    wpdevteam Bold Themes Muffin Group OceanWP
  • Medium 6.5
    CVE-2025-22293

    WordPress Gutentor plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gutentor Gutentor gutentor allows DOM-Based XSS.This issue affects Gutentor: from n/a through <= 3.4.3.

    gutentor Gutentor
  • Medium 6.4
    CVE-2024-10178

    Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

    The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 3.3.9 due to insufficient input sanitization and outp…

    gutentor Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Web / CMS
  • Medium 6.5
    CVE-2024-43308

    WordPress Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor allows Stored XSS.This issue affects Gutentor - Gutenberg Blocks - Page Build…

    gutentor Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor