The Gutenify – Visual Site Builder Blocks & Site Templates WordPress plugin up to version 1.5.9 is vulnerable to stored cross-site scripting (XSS) due to insufficient sanitization and escaping of user-supplied block attributes. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages.