Log in Start free

Jegstudio

Products

ProductCVEsExploitedLatest
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem5–May 5, 2026
Gutenverse – WordPress Blocks, Page Builder & Site Editor5–Sep 25, 2026
Gutenverse4–Nov 21, 2025
Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons2–Dec 9, 2025
Gutenverse Companion2–Aug 13, 2026
Gutenverse Form2–Dec 24, 2025
Startupzy1–Jun 17, 2026
Gutenverse Form – Contact Form Builder, Booking, Reservation, Subscribe for Block Editor1–Jan 8, 2026
Financio1–Apr 26, 2024

Exploited and recent CVEs

  • CVE-2026-92746 Medium 6.4 Gutenverse <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute 0.2%
  • CVE-2026-3002 Medium 6.4 Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks 0.3%
  • CVE-2026-19943 Medium 6.4 Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute 0.3%
  • CVE-2026-66704 High 7.2 WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2026-12399 Medium 4.4 Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter 0.4%
  • CVE-2026-54832 High 7.5 WordPress Gutenverse Companion plugin <= 2.5.0 - Broken Access Control vulnerability 0.3%
  • CVE-2024-33685 Medium 4.3 WordPress Startupzy theme <= 1.1.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-3001 Medium 6.1 Gutenverse <= 3.4.6 - Reflected Cross-Site Scripting via 's' Parameter 0.5%
  • CVE-2026-2948 Medium 6.4 Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl' 0.2%
  • CVE-2026-2868 Medium 6.4 Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG' 0.2%
  • CVE-2026-2924 Medium 6.4 Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad' 0.2%
  • CVE-2025-14984 Medium 6.4 Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2025-68511 Medium 6.5 WordPress Gutenverse Form plugin <= 2.3.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62090 Medium 6.5 WordPress Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons plugin <= 3.0.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-66079 Medium 6.5 WordPress Gutenverse Form plugin <= 2.2.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-66065 Medium 6.5 WordPress Gutenverse plugin <= 3.2.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-7727 Medium 6.4 Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks 0.3%
  • CVE-2025-5234 Medium 6.4 Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter 0.3%
  • CVE-2025-2893 Medium 6.4 Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block 0.3%
  • CVE-2023-35875 Medium 5.3 WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability 0.6%
  • CVE-2024-43920 Medium 6.5 WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38785 Medium 6.5 WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-33690 Medium 4.3 WordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%