StudioPress
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Genesis Blocks | 2 | – | Jul 9, 2024 |
| Open Source Genesis Framework | 1 | – | Oct 25, 2025 |
Exploited and recent CVEs
- CVE-2025-10737 Open Source Genesis Framework <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes 0.2%
- CVE-2024-3563 Genesis Blocks <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sharing Block Attributes 0.3%
- CVE-2024-1946 Genesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content 0.3%