Skip to content
Sign in
4.3 Medium

CVE-2026-16983 The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints,…

Description

The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.

Affected products and versions

Product Affected versions Fixed in
Gutentor 4.0 earliest → < 4.0.6 4.0.6

Other CVEs of Gutentor

The 3 CVEs of Gutentor →
CVE-2025-1986 The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement,… 4.1 Medium CVE-2024-5417 The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outputting… 5.4 Medium
Track this CVE