CVE-2025-8605

Name of the Vulnerable Software and Affected Versions Gutenify – Visual Site Builder Blocks & Site Templates plugin for WordPress versions up to and including 1.5.9

Description The Gutenify plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping of user-provided attributes within the plugin’s block attributes. Authenticated attackers possessing contributor-level access or higher can inject malicious web scripts into pages. These scripts will then execute whenever a user accesses the compromised page.

Recommendations Update the Gutenify – Visual Site Builder Blocks & Site Templates plugin to a version later than 1.5.9.