CVE-2025-58783
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Missing Authorization vulnerability in the Gutentor WordPress plugin (versions up to and including 3.5.5) allows exploiting incorrectly configured access control security levels.
Risk Assessment
An attacker may perform unauthorized actions within the application, potentially leading to data modification or privilege escalation. The risk affects WordPress sites with the Gutentor plugin version <= 3.5.5.
Recommendation
Update the Gutentor plugin to the latest version if available, or consider removing it. Review and correct access control configuration.
Other vulnerabilities in Gutentor
See all- CVE-2026-16983Medium
The Gutentor WordPress plugin before version 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.
- CVE-2025-58680Medium
The Gutentor plugin (versions up to and including 3.5.2) contains a missing authorization vulnerability. It allows exploitation of incorrectly configured access control security levels.
Original NVD description (English source)
Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutentor: from n/a through <= 3.5.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS