Advisories · Technology
jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem.
Every CVE that names jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'
- jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG'
- jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad'
- jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks
- jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block
- jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem
- Cross-site scripting (XSS)