jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Latest jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem vulnerabilities

CVE-2026-2948 — Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl' (CVSS 6.4)
CVE-2026-2868 — Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG' (CVSS 6.4)
CVE-2026-2924 — Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad' (CVSS 6.4)
CVE-2025-66065 — WordPress Gutenverse plugin <= 3.2.1 - Broken Access Control vulnerability (CVSS 6.5)
CVE-2025-7727 — Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks (CVSS 6.4)
CVE-2025-2893 — Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block (CVSS 5.4)
CVE-2023-35875 — WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability (CVSS 5.3)
CVE-2024-43920 — WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-38785 — WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-3692 — Gutenverse < 1.9.1 - Contributor+ Stored XSS (CVSS 6.1)