Skip to content
Sign in
4.1 Medium

CVE-2025-1986 The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement,…

Description

The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

Affected products and versions

Product Affected versions Fixed in
Gutentor 3.4 earliest → < 3.4.7 3.4.7

Other CVEs of Gutentor

The 3 CVEs of Gutentor →
CVE-2026-16983 The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints,… 4.3 Medium CVE-2024-5417 The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outputting… 5.4 Medium
Track this CVE