PatchTheCVEgutentor vulnerabilities and fixes
Recent CVEs affecting gutentor, with upgrade or downgrade steps. 4 tracked.
gutentor has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-04-01. Highest priority: CVE-2024-5417 (score 30/100).
- CVE-2025-1986 MEDIUM 4.1 UPGRADE The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL
- CVE-2024-5417 MEDIUM 5.4 UPGRADE The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outp
- CVE-2024-43308 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in G
- CVE-2024-10178 MEDIUM 6.4 UPGRADE The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stor
FAQ
How do I fix gutentor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gutentor being exploited right now?
None of the tracked gutentor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gutentor CVE should I patch first?
CVE-2024-5417 currently ranks highest (30/100): The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outp.