Plugin icon

Getwid – Gutenberg Blocks

getwid

Vulnerabilities:

11

Last Updated:

October 3, 2025

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2025-09-22
Title
Getwid < 2.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
Fixed in
Fixed in 2.1.3
CVSS
4.3 (medium)
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Fixed in
Fixed in 2.0.12
CVSS
5.9 (medium)
Published
2024-11-19
Title
Getwid – Gutenberg Blocks < 2.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.13
CVSS
6.4 (medium)
Published
2024-07-19
Title
Getwid – Gutenberg Blocks < 2.0.11 - Missing Authentication to MailChimp API key update
Fixed in
Fixed in 2.0.11
CVSS
4.3 (medium)
Published
2024-07-19
Title
Getwid – Gutenberg Blocks < 2.0.11 - Missing Authorization to Google API key update
Fixed in
Fixed in 2.0.11
CVSS
5.3 (medium)
Published
2024-04-26
Title
Getwid – Gutenberg Blocks < 2.0.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'
Fixed in
Fixed in 2.0.8
CVSS
6.4 (medium)
Published
2024-03-21
Title
Getwid – Gutenberg Blocks < 2.0.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content
Fixed in
Fixed in 2.0.6
CVSS
6.4 (medium)
Published
2024-01-17
Title
Getwid – Gutenberg Blocks < 2.0.5 - Captcha Bypass
Fixed in
Fixed in 2.0.5
CVSS
5.3 (medium)
Published
2024-01-17
Title
Getwid – Gutenberg Blocks < 2.0.5 - Missing Authorization to Recaptcha API Key Modification
Fixed in
Fixed in 2.0.5
CVSS
4.3 (medium)
Published
2023-12-15
Title
Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin
Fixed in
Fixed in 2.0.3
CVSS
5.3 (medium)
Published
2023-06-06
Title
Getwid < 1.8.4 - Subscriber+ SSRF
Fixed in
Fixed in 1.8.4
CVSS
5.0 (medium)