Skip to contentJegstudio Gutenverse vulnerabilities
- jegstudio gutenverse form – contact form builder, block form & booking formGutenverse Form WordPress Plugin < 3.2.2 CSV Formula Injection via Form SubmissionCVE-2026-1240185.3 Medium
- jegstudio gutenverse formGutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG IconCVE-2026-1064696.8 Medium
- jegstudio gutenverse – wordpress blocks, page builder & site editorGutenverse <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' AttributeCVE-2026-927466.4 Medium
- jegstudio gutenverse – wordpress blocks, page builder & site editorGutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple BlocksCVE-2026-30026.4 Medium
- jegstudio gutenverse – wordpress blocks, page builder & site editorGutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block AttributeCVE-2026-199436.4 Medium
- jegstudio gutenverse companionWordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2026-667047.2 High
- jegstudio gutenverse – wordpress blocks, page builder & site editorGutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' ParameterCVE-2026-123994.4 Medium
- jegstudio gutenverse formWordPress Gutenverse Form plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-560407.1 High
- jegstudio gutenverse companionWordPress Gutenverse Companion plugin <= 2.5.0 - Broken Access Control vulnerabilityCVE-2026-548327.5 High
- jegstudio gutenverse – wordpress blocks, page builder & site editorGutenverse <= 3.4.6 - Reflected Cross-Site Scripting via 's' ParameterCVE-2026-30016.1 Medium
- jegstudio gutenverse – ultimate wordpress fse blocks addons & ecosystemGutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'CVE-2026-29486.4 Medium
- jegstudio gutenverse – ultimate wordpress fse blocks addons & ecosystemGutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG'CVE-2026-28686.4 Medium
- jegstudio gutenverse – ultimate wordpress fse blocks addons & ecosystemGutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad'CVE-2026-29246.4 Medium
- jegstudio gutenverse form – contact form builder, booking, reservation, subscribe for block editorGutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2025-149846.4 Medium
- jegstudio gutenverse formWordPress Gutenverse Form plugin <= 2.3.1 - Broken Access Control vulnerabilityCVE-2025-685116.5 Medium
- jegstudio gutenverse news – advanced news magazine blog gutenberg blocks addonsWordPress Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons plugin <= 3.0.2 - Broken Access Control vulnerabilityCVE-2025-620906.5 Medium
- jegstudio gutenverse formWordPress Gutenverse Form plugin <= 2.2.0 - Broken Access Control vulnerabilityCVE-2025-660796.5 Medium
- jegstudio gutenverseWordPress Gutenverse plugin <= 3.2.1 - Broken Access Control vulnerabilityCVE-2025-660656.5 Medium
- jegstudio gutenverse – ultimate wordpress fse blocks addons & ecosystemGutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact BlocksCVE-2025-77276.4 Medium
- jegstudio gutenverse news, gutenverse news – advanced news magazine blog gutenberg blocks addons +1 moreGutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId ParameterCVE-2025-52346.4 Medium
- jegstudio gutenverse, gutenverse – ultimate wordpress fse blocks addons & ecosystem +1 moreGutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown BlockCVE-2025-28936.4 Medium
- jegstudio gutenverseWordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerabilityCVE-2023-358755.3 Medium
- jegstudio gutenverseWordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-439206.5 Medium
- jegstudio gutenverseWordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-387856.5 Medium
- jegstudio gutenverseGutenverse < 1.9.1 - Contributor+ Stored XSSCVE-2024-36926.1 Medium