WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gutenberg
Published
2026-10-29
Title
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Slug
gutenberg
Published
2026-10-29
Title
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Slug
gutenberg
Published
2026-10-29
Title
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Slug
gutenberg
Published
2026-10-29
Title
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Slug
gutenberg
Published
2026-10-29
Title
WP 6.6 - 7.1.3 - Author+ Stored XSS via Interactivity Router
Slug
gutenberg
Published
2026-10-29
Title
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Slug
gutenberg
Published
2026-10-29
Title
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Slug
gutenberg
Published
2026-10-29
Title
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Block Markup Parsing
Slug
gutenberg
Published
2026-10-29
Title
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Slug
gutenberg
Published
2026-10-29
Title
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Slug
gutenberg
Published
2026-10-29
Title
Gutenberg < 24.3.0 - Unauthenticated Stored Content Injection via MathML Comment Allowlist
Slug
gutenify
Published
2024-05-10
Title
Gutenify < 1.4.1 - Unauthenticated Sensitive Information Exposure
Slug
gutenify
Published
2025-04-04
Title
Gutenify < 1.5.8 - Contributor+ Stored XSS
Slug
gutenify
Published
2025-08-26
Title
Gutenify < 1.5.5 - Unauthenticated Local File Inclusion
Slug
gutenify
Published
2025-09-23
Title
Gutenify < 1.5.8 - Unauthenticated Stored Cross-Site Scripting
Slug
gutenify
Published
2025-11-17
Title
Gutenify - Visual Site Builder Blocks & Site Templates <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block
Slug
gutenium
Published
2024-11-08
Title
Gutenium Blocks <= 1.1.7 - Contributor+ Stored XSS
Slug
gutenkit-blocks-addon
Published
2024-10-10
Title
GutenKit < 2.1.1 - Unauthenticated Arbitrary File Upload
Slug
gutenkit-blocks-addon
Published
2025-04-22
Title
GutenKit < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gutenkit-blocks-addon
Published
2025-09-22
Title
GutenKit < 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gutenkit-blocks-addon
Published
2026-07-22
Title
GutenKit < 2.4.13 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST Endpoints
Slug
gutenkit-blocks-addon
Published
2026-08-18
Title
GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload
Slug
gutenkit-blocks-addon
Published
2026-08-18
Title
GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
Slug
gutenkit-blocks-addon
Published
2026-09-02
Title
GutenKit < 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'
Slug
gutenkit-blocks-addon
Published
2026-09-01
Title
GutenKit < 2.5.1 - Contributor+ Stored CSS Injection