StudioPress

Products

ProductCVEsExploitedLatest
Genesis Blocks2–Jul 9, 2024
Open Source Genesis Framework1–Oct 25, 2025

Exploited and recent CVEs

  • CVE-2025-10737 Medium 6.4 Open Source Genesis Framework <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes 0.2%
  • CVE-2024-3563 Medium 6.4 Genesis Blocks <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sharing Block Attributes 0.3%
  • CVE-2024-1946 Medium 6.4 Genesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content 0.3%