Advisories · Technology
jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor.
Every CVE that names jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Gutenverse <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute
- jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks
- jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute
- jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter
- jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Gutenverse <= 3.4.6 - Reflected Cross-Site Scripting via 's' Parameter
- jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor
- Cross-site scripting (XSS)