Gutenberg

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13284 PHP HIGH PATCH This Month

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Gutenberg allows Cross Site Request Forgery.0.0 before 2.13.0, from 3.0.0 before 3.0.5. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Gutenberg Drupal

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2023-38000 MEDIUM POC This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Gutenberg

NVD

CVSS 3.1

5.4

EPSS

0.8%

CVE-2022-33994 LOW POC Monitor

The Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via an SVG document to the "Insert from URL" feature. Rated low severity (CVSS 3.0), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS WordPress Gutenberg

NVD

CVSS 3.1

3.0

EPSS

0.6%

CVE-2024-13284 PHP

EPSS 0% CVSS 8.8

HIGH PATCH This Month

CSRF Gutenberg Drupal

NVD

CVE-2023-38000

EPSS 1% CVSS 5.4

MEDIUM POC This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Gutenberg

NVD

CVE-2022-33994

EPSS 1% CVSS 3.0

LOW POC Monitor

XSS WordPress Gutenberg

NVD