WordPress plugin
Getwid – Gutenberg Blocks security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium13
- Low0
All Getwid – Gutenberg Blocks vulnerabilities
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'
≤3.0.1Update to 3.0.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'
2.1.3 – 2.1.3Update to 2.2.0
- Medium4.3Authenticated (Contributor+) Sensitive Information Exposure
≤2.1.2Update to 2.1.3
- Medium6.4Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
≤3.59.4Update to 3.59.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.0.12Update to 2.0.13
- Medium4.3Missing Authentication to MailChimp API key update
≤2.0.10Update to 2.0.11
- Medium5.3Missing Authorization to Google API key update
≤2.0.10Update to 2.0.11
- Medium6.4Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'
≤2.0.7Update to 2.0.8
- Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content
≤2.0.5Update to 2.0.6
- Medium5.3Captcha Bypass
≤2.0.4Update to 2.0.5
- Medium4.3Missing Authorization to Recaptcha API Key Modification
≤2.0.4Update to 2.0.5
- Medium5.3Improper Input Validation to Arbitrary Email Sending to Admin
≤2.0.2Update to 2.0.3
- Medium4.3Improper Authorization via get_remote_templates REST endpoint
≤1.8.3Update to 1.8.4
- High8.5Authenticated(Subscriber+) Server Side Request Forgery
≤1.8.3Update to 1.8.4
Getwid – Gutenberg Blocks: common questions
Does Getwid – Gutenberg Blocks have known vulnerabilities?
Yes. VulnCrest Radar lists 14 known vulnerabilities in Getwid – Gutenberg Blocks: 1 high, 13 medium. At least one is not fixed in the latest version.
How do I check which version of Getwid – Gutenberg Blocks I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Getwid – Gutenberg Blocks vulnerability?
CVE-2026-91862, published Oct 9, 2026: Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'. Severity: Medium (CVSS 6.4).
Is any Getwid – Gutenberg Blocks vulnerability listed in CISA KEV?
No. None of the known Getwid – Gutenberg Blocks vulnerabilities is currently listed in the CISA KEV catalog.