WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
guruwalk-affiliates
Published
2023-08-28
Title
GuruWalk Affiliates <= 1.0.0 - Admin+ Stored XSS
Slug
guten-free-options
Published
2025-01-17
Title
Guten Free Options <= 0.9.5 - Reflected XSS
Slug
guten-free-options
Published
2025-01-16
Title
Guten Free Options <= 0.9.5 - Reflected Cross-Site Scripting
Slug
guten-post-layout
Published
2024-09-30
Title
Guten Post Layout – An Advanced Post Grid Collection for WordPress Gutenberg < 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Slug
gutena-forms
Published
2026-02-18
Title
Gutena Forms < 1.6.1 - Contributor+ Arbitrary Limited Options Update
Slug
gutena-forms
Published
2026-03-03
Title
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder < 1.6.1 - Authenticated (Contributor+) Limited Options Update in save_gutena_forms_schema()
Slug
gutena-kit
Published
2025-04-01
Title
Gutena Kit – Gutenberg Blocks and Templates <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gutenbee
Published
2025-09-29
Title
GutenBee – Gutenberg Blocks < 2.18.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gutenbee
Published
2026-05-27
Title
GutenBee < 2.20.2 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter
Slug
gutenberg
Published
2022-03-11
Title
WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting
Slug
gutenberg
Published
2022-03-11
Title
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Slug
gutenberg
Published
2022-10-17
Title
Gutenberg < 14.3.1 - Multiple Stored XSS
Slug
gutenberg
Published
2023-10-13
Title
Gutenberg < 16.8.1 - Contributor+ Stored XSS via Navigation Links Block
Slug
gutenberg
Published
2023-11-17
Title
Gutenberg < 16.8.1 - Contributor+ Stored XSS
Slug
gutenberg
Published
2024-04-09
Title
Gutenberg 12.9.0 - 18.0.0 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block
Slug
gutenberg
Published
2024-06-24
Title
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block
Slug
gutenberg
Published
2025-10-25
Title
Gutenberg 21.7 - 21.8 - Contributor+ Stored XSS
Slug
gutenify
Published
2024-05-10
Title
Gutenify < 1.4.1 - Unauthenticated Sensitive Information Exposure
Slug
gutenify
Published
2025-04-04
Title
Gutenify < 1.5.8 - Contributor+ Stored XSS
Slug
gutenify
Published
2025-08-26
Title
Gutenify < 1.5.5 - Unauthenticated Local File Inclusion
Slug
gutenify
Published
2025-09-23
Title
Gutenify < 1.5.8 - Unauthenticated Stored Cross-Site Scripting
Slug
gutenify
Published
2025-11-17
Title
Gutenify - Visual Site Builder Blocks & Site Templates <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block
Slug
gutenium
Published
2024-11-08
Title
Gutenium Blocks <= 1.1.7 - Contributor+ Stored XSS
Slug
gutenkit-blocks-addon
Published
2024-10-10
Title
GutenKit < 2.1.1 - Unauthenticated Arbitrary File Upload
Slug
gutenkit-blocks-addon
Published
2025-04-22
Title
GutenKit < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting