← WordPress Vulnerabilities
WordPress security by component

Gutentor

Gutentor is a WordPress component with 7 published CVE records in this archive. The latest tracked vulnerability was published Sep 22, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: gutentor

CVE-2025-58680: Gutentor: A security weakness

Gutentor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedSep 22, 2025
Safe version guidanceSee mitigation notes
Safe version
Sep 22, 2025 CVE-2025-58680
Gutentor: A security weakness
Gutentor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVDPending
Sep 05, 2025 CVE-2025-58783
Gutentor: A security weakness
Gutentor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Apr 01, 2025 CVE-2025-1986
Gutentor: SQL injection
Gutentor is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE4.1
NVDPending
Jan 07, 2025 CVE-2025-22293
Gutentor: Cross-site scripting
Gutentor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending
Dec 05, 2024 CVE-2024-10178
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor: Cross-site scripting
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Aug 29, 2024 CVE-2024-5417
Gutentor: Cross-site scripting
Gutentor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.4
NVD5.4
Aug 18, 2024 CVE-2024-43308
Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor: Cross-site scripting
Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVD5.4