{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-4685", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-05-14T12:23:47.204Z", "datePublished": "2025-07-21T07:23:24.354Z", "dateUpdated": "2026-04-08T16:35:32.370Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:35:32.370Z"}, "affected": [{"vendor": "gutentor", "product": "Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.4.8", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attributes of multiple widgets, in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "title": "Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e9ec6af-fa51-4e14-abf6-450c1ca6f8d5?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3320485/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Craig Smith"}], "timeline": [{"time": "2025-05-10T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-07-20T18:48:55.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-21T15:17:25.235751Z", "id": "CVE-2025-4685", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-21T15:17:44.800Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-4685", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-21T15:17:25.235751Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-21T15:17:32.257Z"}}], "cna": {"title": "Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets", "credits": [{"lang": "en", "type": "finder", "value": "Craig Smith"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "gutentor", "product": "Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "3.4.8"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-05-10T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-07-20T18:48:55.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e9ec6af-fa51-4e14-abf6-450c1ca6f8d5?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3320485/"}], "descriptions": [{"lang": "en", "value": "The Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attributes of multiple widgets, in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-07-21T07:23:24.354Z"}}}, "cveMetadata": {"cveId": "CVE-2025-4685", "state": "PUBLISHED", "dateUpdated": "2025-07-21T15:17:44.800Z", "dateReserved": "2025-05-14T12:23:47.204Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-07-21T07:23:24.354Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "The Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attributes of multiple widgets, in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}, {"lang": "es", "value": "El complemento Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor para WordPress es vulnerable a cross-site scripting almacenado a trav\u00e9s de los atributos de datos HTML de varios widgets, en todas las versiones hasta la 3.4.8 incluida, debido a una depuraci\u00f3n de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de colaborador o superior, inyectar scripts web arbitrarios en las p\u00e1ginas que se ejecutar\u00e1n al acceder un usuario a una p\u00e1gina inyectada."}], "id": "CVE-2025-4685", "lastModified": "2026-04-15T00:35:42.020", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}]}, "published": "2025-07-21T08:15:24.413", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3320485/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e9ec6af-fa51-4e14-abf6-450c1ca6f8d5?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T14:38:51.348409+00:00", "value": {"mitigation_remediation": ["Upgrade the Gutentor plugin to version 3.4.9 or later.", "If an upgrade is not immediately possible, remove or disable contributors from editing capabilities or restrict the use of the vulnerable widgets until the issue is resolved.", "Implement a content security policy that blocks inline scripts and data\u2011attribute execution to mitigate the impact of any residual stored XSS."], "summary": {"action": "Apply Patch", "impact": "Stored Cross\u2011Site Scripting"}, "threat_synthesis": {"affected_systems": "All WordPress installations running the Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor plugin version 3.4.8 or earlier are affected. The flaw exists in every widget that uses HTML data attributes to store custom settings and does not apply to later releases beyond version 3.4.8.", "description_and_impact": "The Gutentor \u2013 Gutenberg Blocks \u2013 Page Builder for Gutenberg Editor plugin contains an insufficiently sanitized and escaped HTML data attribute processing mechanism that allows an authenticated user with Contributor privileges or higher to insert arbitrary JavaScript into the HTML of a page. When a user views that page, the injected code is executed in the victim\u2019s browser, which can be used to steal session cookies, deface UI, or perform other client\u2011side malicious actions. The vulnerability directly exploits input validation weaknesses classified as CWE\u201179 and compromises the integrity of the content delivered to users.", "risk_and_exploitability": "The CVSS score of 6.4 indicates a moderately high severity. The EPSS score of less than 1% suggests that exploitation is likely uncommon at present, and the vulnerability is not listed in the CISA KEV catalog, implying no confirmed widespread attacks. Notwithstanding the low exploit probability, the requirement for only Contributor\u2011level access means that many sites are potentially at risk, as contributors are commonly added for content creation. An attacker could craft malicious content that, once published, will run automatically in the browsers of all users who view the page, providing a vehicle for cookie theft, defacement, or other client\u2011side abuse."}}}}, "created": "2026-04-22T14:45:19.290988+00:00", "updated": "2026-04-22T14:45:19.291003+00:00", "vendors": [], "weaknesses": ["CWE-79"]}