Gutenkit (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-02. Vendor: Unknown.

CVEs of Gutenkit

• CVE-2026-19698 - CVSS 3.5 (low), 2026-09-02: The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on…
• CVE-2026-19699 - CVSS 2.7 (low), 2026-08-20: The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor…
• CVE-2026-19697 - CVSS 6.8 (medium), 2026-08-20: The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with the file upload…