Skip to content
OpenAdvisories

Vendor

Jegstudio

23 known vulnerabilities.

Jegstudio at a glance

Last 12 months
16
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 2 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 3 vulnerabilities June 2026: 3 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 3 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202610
Aug 202630
Jul 202600
Jun 202630
May 202630
Apr 202610
Mar 202600
Feb 202600
Jan 202610
Dec 202520
Nov 202520
Oct 202500
Sep 202500
Aug 202510
Jul 202500
Jun 202510
May 202500
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202410

Products

Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem 5 Gutenverse – WordPress Blocks, Page Builder & Site Editor 5 Gutenverse 4 Gutenverse Form 2 Gutenverse Companion 2 Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons 2 Startupzy 1 Gutenverse Form – Contact Form Builder, Booking, Reservation, Subscribe for Block Editor 1 Financio 1
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Medium 6.4
    CVE-2026-92746

    Gutenverse <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute

    The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute in all versions up to, and including, 4.0.8 due to insufficient input sanitization an…

    Jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor Web / CMS
  • Medium 6.4
    CVE-2026-3002

    Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks

    The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the multiple blocks in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping.…

    Jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor Web / CMS
  • Medium 6.4
    CVE-2026-19943

    Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute

    The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titleTag' Block Attribute in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escapi…

    Jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor Web / CMS
  • High 7.2
    CVE-2026-66704

    WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability

    Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions.

    Jegstudio Gutenverse Companion
  • Medium 4.4
    CVE-2026-12399

    Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter

    The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.8.0 due to insufficient input sanitization and output escaping. This mak…

    Jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor Web / CMS
  • High 7.5
    CVE-2026-54832

    WordPress Gutenverse Companion plugin <= 2.5.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions.

    Jegstudio Gutenverse Companion
  • Medium 4.3
    CVE-2024-33685

    WordPress Startupzy theme <= 1.1.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jegstudio Startupzy startupzy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Startupzy: from n/a through 1.1.1.

    Jegstudio Startupzy
  • Medium 6.1
    CVE-2026-3001

    Gutenverse <= 3.4.6 - Reflected Cross-Site Scripting via 's' Parameter

    The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. Specifically, the `render_content()` method in `c…

    Jegstudio Gutenverse – WordPress Blocks, Page Builder & Site Editor Web / CMS
  • Medium 6.4
    CVE-2026-2948

    Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'

    The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.5.3 via the import_images() function. This makes it possible for authenticated attackers, w…

    Jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem Web / CMS
  • Medium 6.4
    CVE-2026-2868

    Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG'

    The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'separatorIconSVG' parameter in versions up to, and including, 3.5.3 due to insufficient input sanitization and output …

    Jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem Web / CMS
  • Medium 6.4
    CVE-2026-2924

    Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad'

    The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageLoad' parameter in versions up to, and including, 3.4.6 due to insufficient input sanitization and output escapin…

    Jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem Web / CMS
  • Medium 6.4
    CVE-2025-14984

    Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Gutenverse Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file upload in all versions up to, and including, 2.3.2. This is due to the plugin's framework component adding SVG to the allowed MIME types via the upload_mimes fi…

    Jegstudio Gutenverse Form – Contact Form Builder, Booking, Reservation, Subscribe for Block Editor Web / CMS
  • Medium 6.5
    CVE-2025-68511

    WordPress Gutenverse Form plugin <= 2.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse Form: from n/a through <= 2.3.1.

    Jegstudio Gutenverse Form
  • Medium 6.5
    CVE-2025-62090

    WordPress Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons plugin <= 3.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons gutenverse-news allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse News – Advanced News M…

    Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons
  • Medium 6.5
    CVE-2025-66079

    WordPress Gutenverse Form plugin <= 2.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse Form: from n/a through <= 2.2.0.

    Jegstudio Gutenverse Form
  • Medium 6.5
    CVE-2025-66065

    WordPress Gutenverse plugin <= 3.2.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jegstudio Gutenverse gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse: from n/a through <= 3.2.1.

    Jegstudio Gutenverse
  • Medium 6.4
    CVE-2025-7727

    Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks

    The Gutenverse plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Fun Fact blocks in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping on user supplied attribu…

    Jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem Web / CMS
  • Medium 6.4
    CVE-2025-5234

    Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter

    The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

    Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons Web / CMS
  • Medium 6.4
    CVE-2025-2893

    Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block

    The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all versions up to, and including, 2.2.1 due to insufficient input sanitization and o…

    Jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem Web / CMS
  • Medium 5.3
    CVE-2023-35875

    WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jegstudio Gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse: from n/a through 1.8.5.

    Jegstudio Gutenverse
  • Medium 6.5
    CVE-2024-43920

    WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.4.

    Jegstudio Gutenverse
  • Medium 6.5
    CVE-2024-38785

    WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio Gutenverse allows Stored XSS.This issue affects Gutenverse: from n/a through 1.9.2.

    Jegstudio Gutenverse
  • Medium 4.3
    CVE-2024-33690

    WordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Jegstudio Financio.This issue affects Financio: from n/a through 1.1.3.

    Jegstudio Financio