Jetmonsters Getwid – Gutenberg Blocks

• CVE-2026-91862 Medium 6.4 Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points' 0.2%
• CVE-2026-5924 Medium 6.4 Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle' 0.3%
• CVE-2024-5020 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
• CVE-2024-10872 Medium 6.4 Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-6489 Medium 5.3 Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update 0.3%
• CVE-2024-6491 Medium 4.3 Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update 0.4%
• CVE-2024-3588 Medium 6.4 Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown' 0.5%
• CVE-2024-1948 Medium 6.4 Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content 0.4%
• CVE-2023-6963 Medium 5.3 Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass 0.5%
• CVE-2023-6959 Medium 4.3 Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification 0.4%
• CVE-2023-1895 High 8.5 Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery 0.6%
• CVE-2023-1910 Medium 4.3 Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint 0.5%