Gutentor vulnerabilities

The Gutentor WordPress plugin before version 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role.

The Gutentor plugin (versions up to and including 3.5.2) contains a missing authorization vulnerability. It allows exploitation of incorrectly configured access control security levels.

Missing Authorization vulnerability in the Gutentor WordPress plugin (versions up to and including 3.5.5) allows exploiting incorrectly configured access control security levels.