Advisories · Technology
jetmonsters Getwid – Gutenberg Blocks.
Every CVE that names jetmonsters Getwid – Gutenberg Blocks among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'
- jetmonsters Getwid – Gutenberg Blocks
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'
- jetmonsters Getwid – Gutenberg Blocks
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
- extendthemes Colibri Page Builder
- smub Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
- jetmonsters Getwid – Gutenberg Blocks
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update
- jetmonsters Getwid – Gutenberg Blocks
- Broken access control
- CVSS 4.3 Medium
Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update
- jetmonsters Getwid – Gutenberg Blocks
- Broken access control
- CVSS 6.4 Medium
Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'
- jetmonsters Getwid – Gutenberg Blocks
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content
- jetmonsters Getwid – Gutenberg Blocks
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
- jetmonsters Getwid – Gutenberg Blocks
- CWE-804
- CVSS 4.3 Medium
Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification
- jetmonsters Getwid – Gutenberg Blocks
- Broken access control
- CVSS 8.5 High
Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery
- jetmonsters Getwid – Gutenberg Blocks
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint
- jetmonsters Getwid – Gutenberg Blocks
- Broken access control