Description
Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WordPress.com | Gutenverse Form | ≤ 2.4.7 | — |
High · 7.1
CVE-2026-56040
EUVD-2026-39702GHSA-4vr7-2w2q-jv5q
WordPress Gutenverse Form plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack