Jegstudio
21 CVEs across 11 Jegstudio products. Browse Jegstudio vulnerabilities, severities, and proof-of-concept exploits.
Jegstudio products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66704 | High | 7.2 | 2026-08-13 | Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions. |
CVE-2026-12399 | Medium | 4.4 | 2026-06-27 | The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versi… |
CVE-2026-54832 | High | 7.5 | 2026-06-26 | Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. |
CVE-2024-33685 | Medium | 4.3 | 2026-06-17 | Missing Authorization vulnerability in Jegstudio Startupzy startupzy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affec… |
CVE-2026-3001 | Medium | 6.1 | 2026-05-27 | The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to in… |
CVE-2026-2948 | Medium | 6.4 | 2026-05-05 | The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and incl… |
CVE-2026-2868 | Medium | 6.4 | 2026-05-05 | The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'separatorIconSVG'… |
CVE-2026-2924 | Medium | 6.4 | 2026-04-04 | The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageLoad' paramet… |
CVE-2025-14984 | Medium | 6.4 | 2026-01-08 | The Gutenverse Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file upload in all versions up to, and including, 2.3.2. This is… |
CVE-2025-68511 | Medium | 6.5 | 2025-12-24 | Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-62090 | Medium | 6.5 | 2025-12-09 | Missing Authorization vulnerability in Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons gutenverse-news allows Exploiting Incorr… |
CVE-2025-66079 | Medium | 6.5 | 2025-11-21 | Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-66065 | Medium | 6.5 | 2025-11-21 | Missing Authorization vulnerability in Jegstudio Gutenverse gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-7727 | Medium | 6.4 | 2025-08-06 | The Gutenverse plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Fun Fact blocks in all versions up to, and… |
CVE-2025-5234 | Medium | 6.4 | 2025-06-19 | The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in all versions up to, and including, 1.0.4… |
CVE-2025-2893 | Medium | 6.4 | 2025-04-29 | The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's coun… |
CVE-2023-35875 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Jegstudio Gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenver… |
CVE-2024-43920 | Medium | 6.5 | 2024-08-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue… |
CVE-2024-38785 | Medium | 6.5 | 2024-07-21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue… |
CVE-2024-3692 | Medium | 6.1 | 2024-05-03 | The Gutenverse WordPress plugin before 1.9.1 does not validate the htmlTag option in various of its block before outputting it back in a page/post where the b… |
CVE-2024-33690 | Medium | 4.3 | 2024-04-26 | Cross-Site Request Forgery (CSRF) vulnerability in Jegstudio Financio.This issue affects Financio: from n/a through 1.1.3. |