Jegstudio vulnerabilities

Products

• Gutenverse 6
• Gutenverse – Ultimate Wordpress Fse Blocks Addons & Ecosystem 5
• Gutenverse – Wordpress Blocks, Page Builder & Site Editor 5
• Gutenverse Form 4
• Gutenverse Companion 2

Newest

• jegstudio gutenverse form Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG Icon CVE-2026-106469 6.8 MediumOctober 14, 2026
• jegstudio gutenverse – wordpress blocks, page builder & site editor Gutenverse <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute CVE-2026-92746 6.4 MediumSeptember 25, 2026
• jegstudio gutenverse – wordpress blocks, page builder & site editor Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks CVE-2026-3002 6.4 MediumAugust 26, 2026
• jegstudio gutenverse – wordpress blocks, page builder & site editor Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute CVE-2026-19943 6.4 MediumAugust 25, 2026
• jegstudio gutenverse companion WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-66704 7.2 HighAugust 13, 2026
• jegstudio gutenverse – wordpress blocks, page builder & site editor Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter CVE-2026-12399 4.4 MediumJune 27, 2026
• jegstudio gutenverse form WordPress Gutenverse Form plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-56040 7.1 HighJune 26, 2026
• jegstudio gutenverse companion WordPress Gutenverse Companion plugin <= 2.5.0 - Broken Access Control vulnerability CVE-2026-54832 7.5 HighJune 26, 2026
• jegstudio startupzy WordPress Startupzy theme <= 1.1.1 - Broken Access Control vulnerability CVE-2024-33685 4.3 MediumJune 17, 2026
• jegstudio gutenverse – wordpress blocks, page builder & site editor Gutenverse <= 3.4.6 - Reflected Cross-Site Scripting via 's' Parameter CVE-2026-3001 6.1 MediumMay 27, 2026
• jegstudio gutenverse – ultimate wordpress fse blocks addons & ecosystem Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl' CVE-2026-2948 6.4 MediumMay 5, 2026
• jegstudio gutenverse – ultimate wordpress fse blocks addons & ecosystem Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG' CVE-2026-2868 6.4 MediumMay 5, 2026
• jegstudio gutenverse – ultimate wordpress fse blocks addons & ecosystem Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad' CVE-2026-2924 6.4 MediumApril 4, 2026
• jegstudio gutenverse form – contact form builder, booking, reservation, subscribe for block editor Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2025-14984 6.4 MediumJanuary 8, 2026
• jegstudio gutenverse form WordPress Gutenverse Form plugin <= 2.3.1 - Broken Access Control vulnerability CVE-2025-68511 6.5 MediumDecember 24, 2025
• jegstudio gutenverse news – advanced news magazine blog gutenberg blocks addons WordPress Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons plugin <= 3.0.2 - Broken Access Control vulnerability CVE-2025-62090 6.5 MediumDecember 9, 2025
• jegstudio gutenverse form WordPress Gutenverse Form plugin <= 2.2.0 - Broken Access Control vulnerability CVE-2025-66079 6.5 MediumNovember 21, 2025
• jegstudio gutenverse WordPress Gutenverse plugin <= 3.2.1 - Broken Access Control vulnerability CVE-2025-66065 6.5 MediumNovember 21, 2025
• jegstudio gutenverse – ultimate wordpress fse blocks addons & ecosystem Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks CVE-2025-7727 6.4 MediumAugust 6, 2025
• jegstudio gutenverse news, gutenverse news – advanced news magazine blog gutenberg blocks addons +1 more Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter CVE-2025-5234 6.4 MediumJune 19, 2025
• jegstudio gutenverse, gutenverse – ultimate wordpress fse blocks addons & ecosystem +1 more Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block CVE-2025-2893 6.4 MediumApril 29, 2025
• jegstudio gutenverse WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability CVE-2023-35875 5.3 MediumDecember 13, 2024
• jegstudio gutenverse WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-43920 6.5 MediumAugust 29, 2024
• jegstudio gutenverse WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-38785 6.5 MediumJuly 21, 2024
• jegstudio gutenverse Gutenverse < 1.9.1 - Contributor+ Stored XSS CVE-2024-3692 6.1 MediumMay 3, 2024
• jegstudio financio WordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-33690 4.3 MediumApril 26, 2024