WordPress plugin
Gutenify – Visual Site Builder Blocks & Starter Templates security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium3
- Low0
All Gutenify – Visual Site Builder Blocks & Starter Templates vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Visual Site Builder Blocks & Site Templates <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block ≤1.5.9No patch available | CVE-2025-8605 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.5.7Update to 1.5.8 | CVE-2025-53324 | |
| High8.1 | Unauthenticated Local File Inclusion ≤1.5.4Update to 1.5.5 | CVE-2025-53326 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.5.7Update to 1.5.8 | CVE-2025-32168 | |
| Medium5.3 | Unauthenticated Sensitive Information Exposure ≤1.4.0Update to 1.4.1 | CVE-2024-35165 |
- Medium6.4Visual Site Builder Blocks & Site Templates <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block
≤1.5.9No patch available
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.5.7Update to 1.5.8
- High8.1Unauthenticated Local File Inclusion
≤1.5.4Update to 1.5.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.5.7Update to 1.5.8
- Medium5.3Unauthenticated Sensitive Information Exposure
≤1.4.0Update to 1.4.1
Gutenify – Visual Site Builder Blocks & Starter Templates: common questions
Does Gutenify – Visual Site Builder Blocks & Starter Templates have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Gutenify – Visual Site Builder Blocks & Starter Templates: 2 high, 3 medium. At least one is not fixed in the latest version.
How do I check which version of Gutenify – Visual Site Builder Blocks & Starter Templates I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Gutenify – Visual Site Builder Blocks & Starter Templates vulnerability?
CVE-2025-8605, published Nov 17, 2025: Gutenify - Visual Site Builder Blocks & Site Templates <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block. Severity: Medium (CVSS 6.4).
Is any Gutenify – Visual Site Builder Blocks & Starter Templates vulnerability listed in CISA KEV?
No. None of the known Gutenify – Visual Site Builder Blocks & Starter Templates vulnerabilities is currently listed in the CISA KEV catalog.