Advisories · Technology
ataurr GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor.
Every CVE that names ataurr GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss'
- ataurr GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
GutenKit <= 2.4.12 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST Endpoints
- ataurr GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload
- ataurr GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor
- Broken access control