Plugin icon

GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor

gutenkit-blocks-addon

Vulnerabilities:

8

Last Updated:

August 30, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2026-09-02
Title
GutenKit < 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'
Fixed in
Fixed in 2.4.5
CVSS
5.5 (medium)
Published
2026-09-01
Title
GutenKit < 2.5.1 - Contributor+ Stored CSS Injection
Fixed in
Fixed in 2.5.1
CVSS
3.5 (low)
Published
2026-08-18
Title
GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload
Fixed in
Fixed in 2.5.0
CVSS
6.8 (medium)
Published
2026-08-18
Title
GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
Fixed in
Fixed in 2.5.0
CVSS
2.7 (low)
Published
2026-07-22
Title
GutenKit < 2.4.13 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST Endpoints
Fixed in
Fixed in 2.4.13
CVSS
5.3 (medium)
Published
2025-09-22
Title
GutenKit < 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.3
CVSS
6.4 (medium)
Published
2025-04-22
Title
GutenKit < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.3
CVSS
6.4 (medium)
Published
2024-10-10
Title
GutenKit < 2.1.1 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 2.1.1
CVSS
9.8 (critical)