https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T02:55:55.031611+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-9234 CVE-2024-9234 — GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload 2026-10-01T02:55:55.051515+00:00

Affected: ataurr GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor, wpmet gutenkit

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the install_and_activate_plugin_from_external() function (install-active-plugin REST API endpoint) in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins, or utilize the functionality to upload arbitrary files spoofed like plugins.