Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Security & Risk Analysis

wordpress.org/plugins/gutentor

Advanced yet easy, Gutenberg editor page builder blocks. Create a masterpiece, pixel perfect website using modern WordPress Gutenberg blocks.

30K active installs v3.5.6 PHP 5.6.20+ WP 6.0+ Updated Mar 31, 2026
blocksgutenberg-blocksgutenberg-editorpage-builderwordpress-blocks
95
A · Safe
CVEs total8
Unpatched0
Last CVEApr 22, 2026
Download
Safety Verdict

Is Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Safe to Use in 2026?

Generally Safe

Score 95/100

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

8 known CVEsLast CVE: Apr 22, 2026Updated 1mo ago
Risk Assessment

The Gutentor plugin v3.5.5 presents a mixed security picture. The static analysis reveals strong adherence to secure coding practices, with an impressive 98% of outputs properly escaped and a high percentage of SQL queries utilizing prepared statements. The absence of critical or high severity taint flows further indicates a generally well-hardened codebase against immediate, severe vulnerabilities. However, the presence of 7 known CVEs, with one still unpatched, is a significant concern. The historical prevalence of missing authorization, XSS, and SQL injection vulnerabilities suggests a pattern that requires careful attention. While the current static analysis shows no immediate exploitable flaws in these areas, the past record warrants vigilance, particularly regarding the unpatched CVE.

Key Concerns

  • Unpatched CVE present
  • History of medium severity CVEs
  • History of SQL Injection vulnerabilities
  • History of Missing Authorization vulnerabilities
  • History of XSS vulnerabilities
Vulnerabilities
8 published

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Security Vulnerabilities

CVEs by Year

2 CVEs in 2024
2024
5 CVEs in 2025
2025
1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

Medium
8

8 total CVEs

CVE-2026-2951medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML

Apr 22, 2026 Patched in 3.5.6 (1d)
CVE-2025-58680medium · 5.4Missing Authorization

Gutentor <= 3.5.2 - Missing Authorization

Sep 22, 2025 Patched in 3.5.3 (158d)
CVE-2025-58783medium · 4.3Missing Authorization

Gutentor <= 3.5.5 - Missing Authorization

Sep 5, 2025 Patched in 3.5.6 (223d)
CVE-2025-4685medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Jul 20, 2025 Patched in 3.4.9 (1d)
CVE-2025-1986medium · 4.9Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Gutentor <= 3.4.6 - Authenticated (Administrator+) SQL Injection

Mar 11, 2025 Patched in 3.4.7 (31d)
CVE-2025-22293medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Gutentor <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jan 6, 2025 Patched in 3.4.4 (17d)
CVE-2024-10178medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

Dec 4, 2024 Patched in 3.4.0 (1d)
CVE-2024-43308medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Aug 16, 2024 Patched in 3.3.6 (28d)
Code Analysis
Analyzed Mar 16, 2026

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
9 prepared
Unescaped Output
16
747 escaped
Nonce Checks
7
Capability Checks
39
File Operations
2
External Requests
4
Bundled Libraries
0

SQL Query Safety

90% prepared10 total queries

Output Escaping

98% escaped763 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

4 flows
deactivate_block (includes\admin\class-gutentor-admin.php:385)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_gutentor_activate_blockincludes\admin\class-gutentor-admin.php:319
authwp_ajax_gutentor_deactivate_blockincludes\admin\class-gutentor-admin.php:320
authwp_ajax_gutentor_bulk_activate_blocksincludes\admin\class-gutentor-admin.php:322
authwp_ajax_gutentor_bulk_deactivate_blocksincludes\admin\class-gutentor-admin.php:323
WordPress Hooks 158
actionrest_api_initgutentor.php:83
actionadmin_menuincludes\admin\class-gutentor-admin.php:22
actionadmin_initincludes\admin\class-gutentor-admin.php:23
actionadmin_enqueue_scriptsincludes\admin\class-gutentor-admin.php:25
actionadmin_enqueue_scriptsincludes\admin\class-gutentor-admin.php:26
actionenqueue_block_editor_assetsincludes\admin\class-gutentor-admin.php:27
actionplugin_action_links_gutentor/gutentor.phpincludes\admin\class-gutentor-admin.php:29
filterregister_taxonomy_argsincludes\admin\class-gutentor-admin.php:48
actioninitincludes\admin\class-gutentor-tracking.php:71
actionset_gutentor_settings_optionsincludes\admin\class-gutentor-tracking.php:72
actionadmin_initincludes\admin\class-gutentor-tracking.php:73
actionadmin_initincludes\admin\class-gutentor-tracking.php:74
actionadmin_noticesincludes\admin\class-gutentor-tracking.php:75
actiongutentor_weekly_scheduled_eventsincludes\admin\class-gutentor-tracking.php:396
actionadmin_menuincludes\admin\settings\class-admin-settings.php:17
actionadmin_initincludes\admin\settings\class-admin-settings.php:18
filterregister_post_type_argsincludes\admin\settings\class-admin-settings.php:19
filteruse_block_editor_for_post_typeincludes\admin\settings\class-admin-settings.php:20
actioninitincludes\admin\settings\class-admin-settings.php:22
filterpage_templateincludes\admin\settings\class-admin-settings.php:287
filtersingle_templateincludes\admin\settings\class-admin-settings.php:290
actioninitincludes\block-base\class-gutentor-block-base.php:71
filtergutentor_common_attr_default_valueincludes\block-base\class-gutentor-block-base.php:74
filtergutentor_save_element_classincludes\block-base\class-gutentor-block-hooks.php:103
filtergutentor_save_section_classincludes\block-base\class-gutentor-block-hooks.php:104
filtergutentor_save_section_classincludes\block-base\class-gutentor-block-hooks.php:105
filtergutentor_save_before_containerincludes\block-base\class-gutentor-block-hooks.php:106
filtergutentor_save_section_classincludes\block-base\class-gutentor-block-hooks.php:107
filtergutentor_save_container_classincludes\block-base\class-gutentor-block-hooks.php:108
filtergutentor_save_grid_row_classincludes\block-base\class-gutentor-block-hooks.php:109
filtergutentor_save_grid_column_classincludes\block-base\class-gutentor-block-hooks.php:110
filtergutentor_save_before_containerincludes\block-base\class-gutentor-block-hooks.php:111
filtergutentor_save_after_containerincludes\block-base\class-gutentor-block-hooks.php:112
filtergutentor_save_grid_row_classincludes\block-base\class-gutentor-block-hooks.php:113
filtergutentor_save_item_image_display_dataincludes\block-base\class-gutentor-block-hooks.php:114
filtergutentor_save_grid_column_classincludes\block-base\class-gutentor-block-hooks.php:115
filtergutentor_save_before_block_itemsincludes\block-base\class-gutentor-block-hooks.php:116
filtergutentor_save_link_attrincludes\block-base\class-gutentor-block-hooks.php:117
filtergutentor_edit_post_module_readmore_button_dataincludes\block-base\class-gutentor-block-hooks.php:118
filtergutentor_save_block_header_dataincludes\block-base\class-gutentor-block-hooks.php:119
filtergutentor_save_grid_column_classincludes\block-base\class-gutentor-block-hooks.php:120
filtergutentor_post_module_product_button_classincludes\block-base\class-gutentor-block-hooks.php:121
filtergutentor_post_module_download_button_classincludes\block-base\class-gutentor-block-hooks.php:122
filtergutentor_edit_enable_columnincludes\block-base\class-gutentor-block-hooks.php:123
filtergutentor_dynamic_style_locationincludes\block-base\class-gutentor-block-hooks.php:126
filtergutentor_post_module_main_wrap_classincludes\block-base\class-gutentor-post-modules-hooks.php:104
filtergutentor_post_module_main_wrap_classincludes\block-base\class-gutentor-post-modules-hooks.php:105
filtergutentor_term_module_main_wrap_classincludes\block-base\class-gutentor-post-modules-hooks.php:106
filtergutentor_post_module_main_wrap_classincludes\block-base\class-gutentor-post-modules-hooks.php:107
filtergutentor_post_module_main_wrap_classincludes\block-base\class-gutentor-post-modules-hooks.php:108
filtergutentor_post_module_post_item_heightincludes\block-base\class-gutentor-post-modules-hooks.php:109
filtergutentor_term_module_main_wrap_classincludes\block-base\class-gutentor-post-modules-hooks.php:110
filtergutentor_post_module_before_containerincludes\block-base\class-gutentor-post-modules-hooks.php:111
filtergutentor_term_module_before_containerincludes\block-base\class-gutentor-post-modules-hooks.php:112
filtergutentor_post_module_container_classincludes\block-base\class-gutentor-post-modules-hooks.php:113
filtergutentor_term_module_container_classincludes\block-base\class-gutentor-post-modules-hooks.php:114
filtergutentor_post_module_grid_row_classincludes\block-base\class-gutentor-post-modules-hooks.php:115
filtergutentor_term_module_grid_row_classincludes\block-base\class-gutentor-post-modules-hooks.php:116
filtergutentor_post_module_grid_column_classincludes\block-base\class-gutentor-post-modules-hooks.php:117
filtergutentor_term_module_article_classincludes\block-base\class-gutentor-post-modules-hooks.php:118
filtergutentor_term_module_t2_grid_classincludes\block-base\class-gutentor-post-modules-hooks.php:119
filtergutentor_post_module_p2_grid_classincludes\block-base\class-gutentor-post-modules-hooks.php:120
filtergutentor_post_module_p6_grid_column_classincludes\block-base\class-gutentor-post-modules-hooks.php:121
filtergutentor_post_module_before_containerincludes\block-base\class-gutentor-post-modules-hooks.php:122
filtergutentor_term_module_before_containerincludes\block-base\class-gutentor-post-modules-hooks.php:123
filtergutentor_post_module_after_containerincludes\block-base\class-gutentor-post-modules-hooks.php:124
filtergutentor_term_module_after_containerincludes\block-base\class-gutentor-post-modules-hooks.php:125
filtergutentor_save_item_image_display_dataincludes\block-base\class-gutentor-post-modules-hooks.php:126
filtergutentor_term_save_item_image_display_dataincludes\block-base\class-gutentor-post-modules-hooks.php:127
filtergutentor_post_module_grid_column_classincludes\block-base\class-gutentor-post-modules-hooks.php:128
filtergutentor_term_module_article_classincludes\block-base\class-gutentor-post-modules-hooks.php:129
filtergutentor_post_module_grid_column_classincludes\block-base\class-gutentor-post-modules-hooks.php:130
filtergutentor_post_module_article_classincludes\block-base\class-gutentor-post-modules-hooks.php:131
filtergutentor_post_module_p6_grid_column_classincludes\block-base\class-gutentor-post-modules-hooks.php:132
filtergutentor_post_module_t5_item_heightincludes\block-base\class-gutentor-post-modules-hooks.php:133
filtergutentor_post_module_post_item_heightincludes\block-base\class-gutentor-post-modules-hooks.php:134
filtergutentor_term_module_t1_template2_item_heightincludes\block-base\class-gutentor-post-modules-hooks.php:135
filtergutentor_save_link_attrincludes\block-base\class-gutentor-post-modules-hooks.php:136
filtergutentor_post_module_main_wrap_classincludes\block-base\class-gutentor-post-modules-hooks.php:137
filtergutentor_post_module_main_wrap_classincludes\block-base\class-gutentor-post-modules-hooks.php:138
filtergutentor_post_and_term_module_enable_columnincludes\block-base\class-gutentor-post-modules-hooks.php:139
filtergutentor_post_and_term_module_enable_columnincludes\block-base\class-gutentor-post-modules-hooks.php:140
filtergutentor_edit_news_ticker_data_attrincludes\block-base\class-gutentor-post-modules-hooks.php:141
filteredd_favorites_linkincludes\block-base\class-gutentor-post-modules-hooks.php:142
filtergutentor_post_type_featured_after_contentincludes\block-base\class-gutentor-post-modules-hooks.php:143
actionedd_purchase_link_topincludes\block-base\class-gutentor-query-elements.php:2968
actionedd_purchase_link_topincludes\block-base\class-gutentor-query-elements.php:2972
actionedd_purchase_link_topincludes\block-base\class-gutentor-query-elements.php:3081
actionedd_purchase_link_topincludes\block-base\class-gutentor-query-elements.php:3085
filtergutentor_term_module_article_classincludes\block-base\class-gutentor-term-modules-hooks.php:69
filtergutentor_post_module_p6_query_dataincludes\block-templates\duplex\class-duplex-p6-t1.php:47
filtergutentor_post_module_p6_query_dataincludes\block-templates\duplex\class-duplex-p6-t2.php:46
filtergutentor_post_module_p2_query_dataincludes\block-templates\featured\featured.php:47
filtergutentor_term_module_t2_query_dataincludes\block-templates\featured\featured.php:48
filtergutentor_post_module_p1_query_dataincludes\block-templates\normal\class-normal-p1-edd-templates.php:47
filtergutentor_post_module_p1_query_dataincludes\block-templates\normal\class-normal-p1-templates.php:47
filtergutentor_post_module_p1_query_dataincludes\block-templates\normal\class-normal-p1-woo-templates.php:47
filtergutentor_term_module_t1_query_dataincludes\block-templates\normal\class-normal-t1-templates.php:47
filtergutentor_post_module_p5_query_dataincludes\block-templates\ticker\class-ticker-p5-templates.php:47
filtergutentor_save_blog_post_block_template_dataincludes\block-templates\widgets\class-widget-blog-post-templates.php:47
filtergutentor_post_module_main_wrap_classincludes\blocks\modules\class-gutentor-p3.php:105
filtergutentor_post_module_grid_row_classincludes\blocks\modules\class-gutentor-p3.php:106
filtergutentor_post_module_attrincludes\blocks\modules\class-gutentor-p3.php:107
filtergutentor_post_module_grid_column_classincludes\blocks\modules\class-gutentor-p3.php:108
filtergutentor_post_module_before_block_itemsincludes\blocks\modules\class-gutentor-p3.php:109
filtergutentor_term_module_main_wrap_classincludes\blocks\modules\class-gutentor-t3.php:96
filtergutentor_term_module_grid_row_classincludes\blocks\modules\class-gutentor-t3.php:97
filtergutentor_term_module_attrincludes\blocks\modules\class-gutentor-t3.php:98
filtergutentor_term_module_article_classincludes\blocks\modules\class-gutentor-t3.php:99
filtergutentor_term_module_before_block_itemsincludes\blocks\modules\class-gutentor-t3.php:100
filtercron_schedulesincludes\class-gutentor-cron.php:31
actionwpincludes\class-gutentor-cron.php:32
actionrest_api_initincludes\dynamic-css.php:83
actionrender_blockincludes\dynamic-css.php:85
filterwp_headincludes\dynamic-css.php:86
actionwp_enqueue_scriptsincludes\dynamic-css.php:87
filterwp_enqueue_scriptsincludes\dynamic-css.php:89
filteradmin_headincludes\dynamic-css.php:90
filtergutentor_block_editor_localize_dataincludes\dynamic-css.php:93
filterrender_blockincludes\functions\functions.php:2410
actionplugins_loadedincludes\init.php:255
actioninitincludes\init.php:270
actionenqueue_block_assetsincludes\init.php:273
actionwp_footerincludes\init.php:280
actionenqueue_block_editor_assetsincludes\init.php:283
actioncustomize_preview_initincludes\init.php:284
actionafter_setup_themeincludes\init.php:287
filterblock_categories_allincludes\init.php:292
filterblock_categoriesincludes\init.php:294
filterbody_classincludes\init.php:298
filteradmin_body_classincludes\init.php:301
filterwp_kses_allowed_htmlincludes\init.php:310
filtergutentor_default_optionsincludes\init.php:313
actionwidgets_initincludes\init.php:315
actionload-post.phpincludes\metabox\meta-box.php:52
actionload-post-new.phpincludes\metabox\meta-box.php:53
actionadmin_enqueue_scriptsincludes\metabox\meta-box.php:56
actionadd_meta_boxesincludes\metabox\meta-box.php:79
actionsave_postincludes\metabox\meta-box.php:80
filteradmin_menuincludes\pro\gutentor-pro-init.php:69
actionadmin_initincludes\pro\gutentor-pro-init.php:70
actionadmin_initincludes\pro\gutentor-pro-init.php:72
actionadmin_noticesincludes\pro\gutentor-pro-init.php:73
actioninitincludes\pro\gutentor-pro-init.php:382
actionwp_enqueue_scriptsincludes\sidebar-widget\class-gutentor-wp-block-widget.php:42
actionwp_footerincludes\sidebar-widget\class-gutentor-wp-block-widget.php:43
actionwp_footerincludes\sidebar-widget\class-gutentor-wp-block-widget.php:44
actionrest_api_initincludes\tools\class-gutentor-advanced-import.php:32
actiongutentor_get_template_libraryincludes\tools\class-gutentor-advanced-import.php:33
filtergutentor_rest_prepare_data_postincludes\tools\class-gutentor-extend-api.php:40
filtergutentor_rest_prepare_data_pageincludes\tools\class-gutentor-extend-api.php:41
filtergutentor_rest_prepare_data_productincludes\tools\class-gutentor-extend-api.php:42
filtergutentor_rest_prepare_data_downloadincludes\tools\class-gutentor-extend-api.php:43
filterwoocommerce_loop_add_to_cart_linkincludes\tools\class-gutentor-extend-api.php:44
actionrest_api_initincludes\tools\class-gutentor-self-api-handler.php:33
filterprotected_title_formatincludes\tools\class-gutentor-self-api-handler.php:1031
filterpost_password_requiredincludes\tools\class-gutentor-self-api-handler.php:1042
actionrest_api_initincludes\tools\class-gutentor-templateberg.php:32

Scheduled Events 2

gutentor_weekly_scheduled_events
gutentor_daily_scheduled_events
Maintenance & Trust

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 31, 2026
PHP min version5.6.20
Downloads1.8M

Community Trust

Rating92/100
Number of ratings90
Active installs30K
Developer Profile

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Developer Profile

gutentor

1 plugin · 30K total installs

85
trust score
Avg Security Score
95/100
Avg Patch Time
58 days
View full developer profile
Detection Fingerprints

How We Detect Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/gutentor/assets/css/gutentor-main.min.css/wp-content/plugins/gutentor/assets/css/gutentor-editor.min.css/wp-content/plugins/gutentor/assets/js/gutentor-editor.min.js/wp-content/plugins/gutentor/assets/js/gutentor-main.min.js
Script Paths
/wp-content/plugins/gutentor/assets/js/gutentor-editor.min.js/wp-content/plugins/gutentor/assets/js/gutentor-main.min.js
Version Parameters
gutentor/assets/css/gutentor-main.min.css?ver=gutentor/assets/css/gutentor-editor.min.css?ver=gutentor/assets/js/gutentor-editor.min.js?ver=gutentor/assets/js/gutentor-main.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
gutentor-section-wrap
HTML Comments
<!-- gutentor-section-start --><!-- gutentor-section-end --><!-- gutentor-column-start --><!-- gutentor-column-end -->+4 more
Data Attributes
data-gutentor-blockdata-gutentor-columndata-gutentor-sectiondata-gutentor-row
JS Globals
gutentor_admin_datagutentor_editor_dataGutentorBlocks
REST Endpoints
/wp-json/gutentor/v1/comment
Shortcode Output
[gutentor_row][/gutentor_row][gutentor_column][/gutentor_column]
FAQ

Frequently Asked Questions about Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor