Motopress

Getwid

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-10872

  • EPSS 0.17%
  • Veröffentlicht 20.11.2024 11:15:04
  • Zuletzt bearbeitet 23.11.2024 00:59:11

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template-post-custom-field` block in all versions up to, and including, 2.0.12 due to insufficient input sanitization and output escaping. This m...

4.3

CVE-2024-6491

  • EPSS 0.14%
  • Veröffentlicht 20.07.2024 07:15:02
  • Zuletzt bearbeitet 04.02.2025 18:04:16

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mailchimp_api_key_manage function in all versions up to, and including, 2.0.10. This makes it possible for ...

5.3

CVE-2024-6489

  • EPSS 0.15%
  • Veröffentlicht 20.07.2024 07:15:01
  • Zuletzt bearbeitet 04.02.2025 18:04:39

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_google_api_key function in all versions up to, and including, 2.0.10. This makes it possible for authen...

5.4

CVE-2024-3588

  • EPSS 0.29%
  • Veröffentlicht 02.05.2024 17:15:27
  • Zuletzt bearbeitet 04.02.2025 17:35:07

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block in all versions up to, and including, 2.0.7 due to insufficient input sanitization and output escaping on user supplied a...

5.4

CVE-2024-1948

  • EPSS 0.21%
  • Veröffentlicht 09.04.2024 19:15:21
  • Zuletzt bearbeitet 04.02.2025 17:34:32

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block content in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for a...

4.3

CVE-2023-6959

  • EPSS 0.12%
  • Veröffentlicht 05.02.2024 22:15:57
  • Zuletzt bearbeitet 25.11.2024 16:47:33

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the recaptcha_api_key_manage function in all versions up to, and including, 2.0.3. This makes it possible for a...

5.3

CVE-2023-6963

  • EPSS 0.12%
  • Veröffentlicht 05.02.2024 22:15:57
  • Zuletzt bearbeitet 25.11.2024 16:47:33

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to bypass the Captcha Verification of the Contact Form block by omitting ...

7.5

CVE-2023-6042

Exploit
  • EPSS 0.38%
  • Veröffentlicht 08.01.2024 19:15:09
  • Zuletzt bearbeitet 03.06.2025 15:15:50

Any unauthenticated user may send e-mail from the site with any title or content to the admin

4.3

CVE-2023-1910

  • EPSS 0.07%
  • Veröffentlicht 09.06.2023 06:15:59
  • Zuletzt bearbeitet 25.11.2024 16:47:33

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the get_remote_templates function in versions up to, and including, 1.8.3. This makes it possible for aut...

9.6

CVE-2023-1895

  • EPSS 0.17%
  • Veröffentlicht 09.06.2023 06:15:58
  • Zuletzt bearbeitet 25.11.2024 16:47:33

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Server Side Request Forgery via the get_remote_content REST API endpoint in versions up to, and including, 1.8.3. This can allow authenticated attackers with subscriber-level permiss...