gutenberg

Slug: gutenberg · · 0+

Not updated in last 3 months

Overall Score

Excellent quality and security

97
Excellent

What this score means

Scores are calculated on a 100-point scale by analysing six weighted categories: Security, WP.org Readiness, Performance, Code Quality, Accessibility, and Vulnerabilities. Open vulnerabilities are weighted by severity, CVSS, and patch availability, and incomplete source data can reduce confidence slightly.

  • Excellent The plugin follows best practices across every measured category. It is well-maintained, low-risk, and recommended for production use.
  • Good Strong overall quality with minor areas for improvement. Generally safe to use on most sites.
  • Needs Review Some areas of concern detected. Review the full issues report and weigh the risks before installing on production.
  • High Risk Significant quality or security problems found. Exercise caution — check the details carefully before using this plugin.
Score computed: May 23, 2026 10:14 pm (2 weeks ago). Vulnerability data mode: Live.
High confidence (100/100) based on metadata completeness and vulnerability evidence quality.
Open vulnerabilities are weighted by severity, CVSS, and patch availability, then adjusted slightly when the source data is incomplete.
  • Wordfence: June 10, 2026 5:46 am (52 minutes ago)

No known open vulnerabilities found.

Score Breakdown

Shield
Security
100
Excellent
Why this score?

Top deductions are based on 0 affected rules, reducing this category by 0 total points.

No deductions were applied for this category in the latest score run.

W
WP.org Readiness
85
Good
Why this score?

Top deductions are based on 4 affected rules, reducing this category by 15 total points.

Rule Hits Impact Share
Repo issue: Warning 2 -6 40%
Last update is over one year old 1 -5 33.3%
Tested up to version is behind current WordPress 1 -3 20%

Plus 1 additional rules with smaller impact.

Show all rules (1 more)
Rule Hits Impact Share
Repo issue: Notice 1 -1 6.7%
Speed
Performance
100
Excellent
Why this score?

Top deductions are based on 0 affected rules, reducing this category by 0 total points.

No deductions were applied for this category in the latest score run.

Code
Code Quality
100
Excellent
Why this score?

Top deductions are based on 0 affected rules, reducing this category by 0 total points.

No deductions were applied for this category in the latest score run.

A11y
Accessibility
100
Excellent
Why this score?

Top deductions are based on 0 affected rules, reducing this category by 0 total points.

No deductions were applied for this category in the latest score run.

Bug
Vulnerability Status
100
Excellent
Why this score?

Top deductions are based on 0 affected rules, reducing this category by 0 total points.

No deductions were applied for this category in the latest score run.

Plugin Details

Scan Summary

  • Errors: 0
  • Warnings: 2
  • Notices: 1
  • Last Scanned: 2026-05-23 21:14:12
  • Score confidence: 100/100
Scans are performed automatically once per day, and the report will note when source data is stale or incomplete.

What Changed Since Last Scan

Comparing latest scan (2026-05-23 21:14:12) to previous scan (2026-05-22 14:26:22).
New: 0 Resolved: 0 Worsened: 0

New Issues

No items in this category.

Resolved Issues

No items in this category.

Worsened Issues

No items in this category.

Detected Issues

Severity Category Message File Fix Guidance
WARNING REPO Plugin metadata is missing a declared minimum PHP version.
Quick Add a "Requires PHP" value in the plugin header and readme metadata.
Moderate Validate minimum PHP compatibility across supported environments and release notes.
Advanced Automate compatibility matrix tests in CI for all declared PHP versions.
WARNING REPO Plugin metadata has no 'Tested up to' value.
Quick Set the "Tested up to" value in readme.txt to the latest stable WordPress release.
Moderate Run smoke tests on current WordPress major/minor versions before publishing updates.
Advanced Adopt automated WordPress-version CI pipelines and gate releases on pass/fail status.
NOTICE REPO Plugin metadata does not declare a minimum WordPress version.
Quick Add "Requires at least" to plugin headers and readme metadata.
Moderate Confirm feature compatibility boundaries and document unsupported WordPress versions.
Advanced Introduce version-aware automated tests for WordPress APIs used by the plugin.

Score History

Range Change: 0 pts · All-Time High: 97/100

All Past Vulnerabilities

Showing all known historical vulnerabilities for this plugin, including open and closed records.

Vulnerability CVE Severity Status Affected Versions Patched Version Updated Source
WordPress Core < 5.9.2 & Gutenberg < 12.7.2 - Prototype Pollution via Block Editor N/A LOW Closed [*, 12.7.2) 12.7.2 2022-03-11 00:00:00 Wordfence
WordPress Core 5.9-6.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Navigation Attributes N/A LOW Closed *-16.8.0 16.8.1 2023-10-12 00:00:00 Wordfence
Gutenberg 12.9.0 - 18.0.0 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block N/A LOW Closed 12.9.0-18.0.0 18.01 2024-04-09 00:00:00 Wordfence
WordPress Core < 6.0.3 & Gutenberg < 14.3.1 - Authenticated Cross-Site Scripting in Various Blocks N/A LOW Closed *-14.3.0 14.3.1 2022-10-18 00:00:00 Wordfence
Gutenberg <= 21.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting N/A LOW Closed *-21.8.2 21.9.0 2025-10-25 00:00:00 Wordfence
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Template Part Block N/A LOW Closed *-18.6.0 18.6.1 2024-06-24 00:00:00 Wordfence