WordPress security by component
Gutena Forms
Plugin description
Gutena Forms creates customizable forms within the WordPress block editor.
Gutena Forms (gutena-forms) is a WordPress plugin with 3 published CVE records in this archive. The latest tracked vulnerability was published Aug 06, 2026; the highest published CVSS base score is 6.8.
Plugin slug:
gutena-formsLatest vulnerability
CVE-2026-66425: Gutena Forms exposes an unauthenticated alternate path to protected functionality
An unauthenticated visitor can reach protected Gutena Forms functionality through an alternate path that does not enforce the intended authentication control in version 1.9.0 and earlier.
| Safe version |
|
||
|---|---|---|---|
| Aug 06, 2026 |
CVE-2026-66425
Gutena Forms exposes an unauthenticated alternate path to protected functionality
An unauthenticated visitor can reach protected Gutena Forms functionality through an alternate path that does not enforce the intended authentication control in version 1.9.0 and earlier.
|
2.0.0 |
CVE6.5
|
| Aug 01, 2026 |
CVE-2026-11995
Gutena's public nonce lets visitors trash arbitrary submissions
Gutena Forms through 1.9.0 exposes the gutena_Forms nonce through wp_localize_script() on public pages containing a form. An unauthenticated visitor can reuse it against management actions that lack authorization, changing any submission's read state or permanently trashing entries; exact action and identifier names are not disclosed.
|
> 1.9.0 |
CVE5.3
|
| Mar 11, 2026 |
CVE-2026-1753
Gutena Forms: A security weakness
Gutena Forms is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.8
|