Количество 3
Количество 3
CVE-2024-9234
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the install_and_activate_plugin_from_external() function (install-active-plugin REST API endpoint) in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins, or utilize the functionality to upload arbitrary files spoofed like plugins.
GHSA-7cmx-277j-7rf8
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the install_and_activate_plugin_from_external() function (install-active-plugin REST API endpoint) in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins, or utilize the functionality to upload arbitrary files spoofed like plugins.
BDU:2026-11306
Уязвимость функции install_and_activate_plugin_from_external() плагина GutenKit - Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor системы управления содержимым сайта WordPress, позволяющая нарушителю загружать произвольные файлы
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-9234 The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the install_and_activate_plugin_from_external() function (install-active-plugin REST API endpoint) in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins, or utilize the functionality to upload arbitrary files spoofed like plugins. | CVSS3: 9.8 | 10% Средний | почти 2 года назад |
| GHSA-7cmx-277j-7rf8 The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the install_and_activate_plugin_from_external() function (install-active-plugin REST API endpoint) in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins, or utilize the functionality to upload arbitrary files spoofed like plugins. | CVSS3: 9.8 | 10% Средний | почти 2 года назад |
 | BDU:2026-11306 Уязвимость функции install_and_activate_plugin_from_external() плагина GutenKit - Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor системы управления содержимым сайта WordPress, позволяющая нарушителю загружать произвольные файлы | CVSS3: 9.8 | 10% Средний | около 2 лет назад |
Уязвимостей на страницу