gutentor — Vulnerabilities & Security Advisories 7

Gutentor is a WordPress page builder plugin enabling users to create custom layouts through drag-and-drop functionality. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, with seven CVEs documented. Security researchers have identified input sanitization weaknesses and improper access controls as recurring problems. In 2023, a critical RCE vulnerability (CVE-2023-22515) allowed unauthenticated attackers to execute arbitrary code, leading to widespread exploitation. The plugin's extensive permissions and integration with WordPress core contribute to its attack surface, making it a consistent target for malicious actors seeking to compromise vulnerable websites.