Back to overview

CVE-2026-15827

MEDIUM
5.3
CVSS 3.1
Description
The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and /wp-json/gutenkit/v1/mailchimp/get/interests REST API endpoints in versions up to, and including, 2.4.12. Both endpoints are registered with permission_callback => '__return_true', and their callbacks read the site's stored Mailchimp API key from the gutenkit_settings_list option and proxy Mailchimp audience/list, merge-field, interest-category, interest-name, and subscriber-count metadata back to the caller with no login, nonce, or capability check. This makes it possible for unauthenticated attackers to retrieve private Mailchimp audience configuration information from any site that has configured the GutenKit Mailchimp integration.

Metadata

CVE ID
CVE-2026-15827
State
PUBLISHED
Assigner
Wordfence
Reserved
2026-07-15 14:14 UTC
Published
2026-07-23 08:34 UTC
Last updated
2026-07-23 13:53 UTC
Primary CWE
CWE-862
CWE-862 Missing Authorization
Vendor / Product
ataurr / GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor
Sources
cve.org  ·  NVD

Severity & Metrics

5.3 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
ataurr GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor — 0 ≤ 2.4.12
Weakness (CWE)
CWESourceDescription
CWE-862 cna CWE-862 Missing Authorization
CVSS scores (1)
ScoreSeverityVersionSourceVector
5.3 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References (10)
Back to overview