Known Vulnerabilities for Gutenberg by Wordpress
Listed below are 1 of the newest known vulnerabilities associated with "Gutenberg" by "Wordpress".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73361 json | Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions. | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-66696 json | Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions. | Not Provided | 2026-08-06 | 2026-08-06 |
| CVE-2026-66639 json | Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 versions. | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-65433 json | Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-65050 json | Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vulnerability in the render callback o... | Not Provided | 2026-07-21 | 2026-07-23 |
| CVE-2026-59559 json | Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-54808 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gut... | Not Provided | 2026-06-17 | 2026-06-17 |
| CVE-2026-18438 json | The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress i... | Not Provided | 2026-08-15 | 2026-08-17 |
| CVE-2026-18435 json | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scri... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-18062 json | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scri... | Not Provided | 2026-08-01 | 2026-08-03 |