Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: jegstudio Component: Gutenverse Clear all filters
TI-2025-02528 CVE-2025-2893 · GHSA-x5q5-67q5-j256

Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block

Priority LOW 28

The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all versions up to, and including, 2.2.1 due t…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00286 Published 2025-04-29 No fix listed CWE-79
TI-2024-29509 CVE-2024-43920 · GHSA-6v86-qcj2-7w7j

Cross-site scripting in jegstudio Gutenverse

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-08-29 No fix listed CWE-79
TI-2024-26018 CVE-2024-38785 · GHSA-73hx-pf5p-qghm

WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-07-21 No fix listed CWE-79
TI-2024-03445 CVE-2024-3692 · GHSA-fxmj-37cj-x4r5

Gutenverse < 1.9.1 - Contributor+ Stored XSS

Priority MEDIUM 60

The Gutenverse WordPress plugin before 1.9.1 does not validate the htmlTag option in various of its block before outputting it back in a page/post where the block is embed, which could allow users with the contributor ro…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00442 Published 2024-05-03 Fixed in 1.9.1 CWE-79