6.5Medium

CVE-2025-46253WordPress GutenKit plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Ataur R GutenKit Published: (1 year ago)

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit gutenkit-blocks-addon allows Stored XSS.This issue affects GutenKit: from n/a through <= 2.2.2.

Weakness (CWE): CWE-79

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Ataur R GutenKit ≤ 2.2.2
wpmet gutenkit < 2.2.3

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:wpmet:gutenkit:*:*:*:*:*:wordpress:*:* < 2.2.3