Plugin security history

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 9 vulnerability records associated with Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor, published between 2024 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

9Total records

0Critical

0High

9Medium

0Low

0Informational

8Patched records

1Currently marked unpatched

2024-08-16First disclosure

2026-04-22Latest disclosure

9 of 9CVE coverage

Use this history

Check and watch Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Check my installed version Watch Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor

Year-by-Year Timeline

Year	Records	Relative volume
2024	2	2 records
2025	6	6 records
2026	1	1 records

Severity Breakdown

Severity	Records	Share
Medium	9	100%

Vulnerability-Type Breakdown

Cross-Site Scripting

6 records66.7%

First: 2024. Latest: 2026.

Missing Authorization

2 records22.2%

First: 2025. Latest: 2025.

SQL Injection

1 record11.1%

First: 2025. Latest: 2025.

Patch Status

Patched: 8
Currently marked unpatched: 1
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

3.5.6
3.5.3
3.4.9
3.4.7
3.4.4
3.4.0
3.3.6

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-3.5.5`	Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML	April 22, 2026	3.5.6	Medium
`*-3.5.2`	Gutentor <= 3.5.2 - Missing Authorization	September 22, 2025	3.5.3	Medium
`*-3.5.5`	Gutentor <= 3.5.5 - Missing Authorization	September 5, 2025	3.5.6	Medium
`*-3.4.8`	Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	July 20, 2025	3.4.9	Medium
`*-3.4.9`	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library	July 2, 2025	Not supplied	Medium
`*-3.4.6`	Gutentor <= 3.4.6 - Authenticated (Administrator+) SQL Injection	March 11, 2025	3.4.7	Medium
`*-3.4.3`	Gutentor <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting	January 6, 2025	3.4.4	Medium
`*-3.3.9`	Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget	December 4, 2024	3.4.0	Medium
`*-3.3.5`	Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting	August 16, 2024	3.3.6	Medium

Selected source records

Latest Records

MediumCVE-2026-2951

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML

Published: April 22, 2026

Affected versions: *-3.5.5
Patched versions: 3.5.6

Original Wordfence record

MediumCVE-2025-58680

Gutentor <= 3.5.2 - Missing Authorization

Published: September 22, 2025

Affected versions: *-3.5.2
Patched versions: 3.5.3

Original Wordfence record

MediumCVE-2025-58783

Gutentor <= 3.5.5 - Missing Authorization

Published: September 5, 2025

Affected versions: *-3.5.5
Patched versions: 3.5.6

Original Wordfence record

MediumCVE-2025-4685

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Published: July 20, 2025

Affected versions: *-3.4.8
Patched versions: 3.4.9

Original Wordfence record

MediumCVE-2024-5647

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

Published: July 2, 2025

Affected versions: *-5.1.2
Patched versions: 5.1.3

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-3.6.0
Patched versions: 3.6.1

Affected versions: *-3.2.22
Patched versions: 3.2.23

Affected versions: *-3.12.2
Patched versions: 3.12.3

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-2.5.52
Patched versions: 2.5.53

Affected versions: *-7.4.2
Patched versions: 7.4.3

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-2.2.14
Patched versions: 2.2.15

Affected versions: *-4.0.5
Patched versions: 4.0.6

Affected versions: *-3.4.9
Patched versions: Not supplied

Affected versions: *-6.0.4
Patched versions: 6.0.5

Original Wordfence record

MediumCVE-2025-1986

Gutentor <= 3.4.6 - Authenticated (Administrator+) SQL Injection

Published: March 11, 2025

Affected versions: *-3.4.6
Patched versions: 3.4.7

Original Wordfence record

MediumCVE-2025-22293

Gutentor <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: January 6, 2025

Affected versions: *-3.4.3
Patched versions: 3.4.4

Original Wordfence record

MediumCVE-2024-10178

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

Published: December 4, 2024

Affected versions: *-3.3.9
Patched versions: 3.4.0

Original Wordfence record

Highest-Severity Records

MediumCVE-2025-4685

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Published: July 20, 2025

Affected versions: *-3.4.8
Patched versions: 3.4.9

Original Wordfence record

MediumCVE-2024-10178

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

Published: December 4, 2024

Affected versions: *-3.3.9
Patched versions: 3.4.0

Original Wordfence record

MediumCVE-2025-22293

Gutentor <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: January 6, 2025

Affected versions: *-3.4.3
Patched versions: 3.4.4

Original Wordfence record

MediumCVE-2024-43308

Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: August 16, 2024

Affected versions: *-3.3.5
Patched versions: 3.3.6

Original Wordfence record

MediumCVE-2024-5647

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

Published: July 2, 2025

Affected versions: *-5.1.2
Patched versions: 5.1.3

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-3.6.0
Patched versions: 3.6.1

Affected versions: *-3.2.22
Patched versions: 3.2.23

Affected versions: *-3.12.2
Patched versions: 3.12.3

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-2.5.52
Patched versions: 2.5.53

Affected versions: *-7.4.2
Patched versions: 7.4.3

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-2.2.14
Patched versions: 2.2.15

Affected versions: *-4.0.5
Patched versions: 4.0.6

Affected versions: *-3.4.9
Patched versions: Not supplied

Affected versions: *-6.0.4
Patched versions: 6.0.5

Original Wordfence record

MediumCVE-2026-2951

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML

Published: April 22, 2026

Affected versions: *-3.5.5
Patched versions: 3.5.6

Original Wordfence record

MediumCVE-2025-58680

Gutentor <= 3.5.2 - Missing Authorization

Published: September 22, 2025

Affected versions: *-3.5.2
Patched versions: 3.5.3

Original Wordfence record

MediumCVE-2025-1986

Gutentor <= 3.4.6 - Authenticated (Administrator+) SQL Injection

Published: March 11, 2025

Affected versions: *-3.4.6
Patched versions: 3.4.7

Original Wordfence record

Currently Marked Unpatched Records

MediumCVE-2024-5647

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

Published: July 2, 2025

Affected versions: *-5.1.2
Patched versions: 5.1.3

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-3.6.0
Patched versions: 3.6.1

Affected versions: *-3.2.22
Patched versions: 3.2.23

Affected versions: *-3.12.2
Patched versions: 3.12.3

Affected versions: *-4.27.1
Patched versions: 4.27.2

Affected versions: *-2.5.52
Patched versions: 2.5.53

Affected versions: *-7.4.2
Patched versions: 7.4.3

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-2.2.14
Patched versions: 2.2.15

Affected versions: *-4.0.5
Patched versions: 4.0.6

Affected versions: *-3.4.9
Patched versions: Not supplied

Affected versions: *-6.0.4
Patched versions: 6.0.5

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory