| CVE-2026-114427 |
GutenKit 2.5.0 - 2.5.4 - Author+ Stored XSS via Page Settings Custom CSS
|
6.8
Medium
|
Nov 6, 2026 |
| CVE-2026-19698 |
The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before…
|
3.5
Low
|
Sep 2, 2026 |
| CVE-2026-19697 |
The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it…
|
6.8
Medium
|
Aug 20, 2026 |
| CVE-2026-19699 |
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API…
|
2.7
Low
|
Aug 20, 2026 |