wpmet Vulnerabilities and Affected Products
Vulnerabilities associated with gutenkit.
Products
Clear product- ElementsKit Pro8 vulnerabilities
- Wp Ultimate Review6 vulnerabilities
- elements_kit_elementor_addons5 vulnerabilities
- MetForm Pro4 vulnerabilities
- ElementsKit Elementor addons Lite2 vulnerabilities
- metform_elementor_contact_form_builder2 vulnerabilities
- wp_fundraising_donation_and_crowdfunding_platform2 vulnerabilities
- wp_ultimate_review2 vulnerabilities
- Elements kit Elementor addons1 vulnerability
- Elements Kit Lite1 vulnerability
- Elements Kit Pro1 vulnerability
- ElementsKit Elementor addons1 vulnerability
- GetGenie1 vulnerability
- gutenkit1 vulnerability
- ShopEngine1 vulnerability
- WP Fundraising Donation and Crowdfunding Platform1 vulnerability
- Wp Social Login and Register Social Counter1 vulnerability
- wp_social_login_and_register_social_counter1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-9234CRITICAL | GutenKit <= 2.1.0 - Unauthenticated Arbitrary File UploadThe GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the install_and_activate_plugin_from_external() function (install-active-plugin REST API endpoint) in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins, or utilize the functionality to upload arbitrary files spoofed like plugin… | CVSS9.8v3.1 | EPSS10.4% | PoCs2 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |