← WordPress Vulnerabilities
WordPress security by component

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 23, 2026; the highest CVE/CNA score is 6.4.

Plugin slug: gutentor-gutenberg-blocks-page-builder-for-gutenberg-editor

CVE-2026-2951: Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor: Cross-site scripting

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 3.5.5.

PublishedApr 23, 2026
Known safe version> 3.5.5
Safe version
Apr 23, 2026 CVE-2026-2951
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor: Cross-site scripting
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 3.5.5.
> 3.5.5
CVE5.4
NVDPending
Jul 21, 2025 CVE-2025-4685
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor: Cross-site scripting
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending