| CVE-2026-114427 |
GutenKit 2.5.0 - 2.5.4 - Author+ Stored XSS via Page Settings Custom CSS
|
6.8
Moyenne
|
6 nov. 2026 |
| CVE-2026-19698 |
The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before…
|
3.5
Faible
|
2 sept. 2026 |
| CVE-2026-19697 |
The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it…
|
6.8
Moyenne
|
20 août 2026 |
| CVE-2026-19699 |
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API…
|
2.7
Faible
|
20 août 2026 |