All 3 CVE vulnerabilities found in GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor, with AI-generated Chinese analysis, references, and POCs.
Vendor: ataurr
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-2573 | GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss' CWE-79 | 6.4 | Medium | 2026-09-03 |
| CVE-2026-15827 | GutenKit <= 2.4.12 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST Endpoints CWE-862 | 5.3 | Medium | 2026-07-23 |
| CVE-2024-9234 | GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload CWE-862 | 9.8 | Critical | 2024-10-11 |
All 3 known CVE vulnerabilities affecting GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor with full Chinese analysis, references, and POCs where available.