Product by MotoPress
Getwid
10 known vulnerabilities in Getwid (MotoPress), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-1895 | Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated (Subscriber+) Server Side Request Forgery | 8.5 | |
| High | CVE-2023-6042 | Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin | 7.5 | |
| Medium | CVE-2024-3588 | Jetmonsters Getwid: Cross-site Scripting | 6.4 | |
| Medium | CVE-2023-6963 | Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass | 5.3 | |
| Medium | CVE-2024-1948 | Jetmonsters Getwid: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-10872 | Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2023-1910 | Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint | 4.3 | |
| Medium | CVE-2023-6959 | Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification | 4.3 | |
| Medium | CVE-2024-6489 | Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update | 5.3 | |
| Medium | CVE-2024-6491 | Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update | 4.3 |