CVE-2025-58680
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
The Gutentor plugin (versions up to and including 3.5.2) contains a missing authorization vulnerability. It allows exploitation of incorrectly configured access control security levels.
Risk Assessment
Missing authorization may allow unauthorized users to access functions or data that should be protected. This could lead to content modification or information disclosure on the WordPress site.
Recommendation
Update the Gutentor plugin to a version later than 3.5.2. Review user permission configuration in WordPress.
Other vulnerabilities in Gutentor
See all- CVE-2026-16983Medium
The Gutentor WordPress plugin before version 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.
- CVE-2025-58783Medium
Missing Authorization vulnerability in the Gutentor WordPress plugin (versions up to and including 3.5.5) allows exploiting incorrectly configured access control security levels.
Original NVD description (English source)
Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutentor: from n/a through <= 3.5.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS