SecAlerts
g

gutenverse

Security Risk Profile

44
/100
medium

Security Risk Score

Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from May 3, 2024 to present

10
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched

Threat Assessment

Avg CVSS
6.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
44/100
medium
📈 2 in Last 30 Days

Severity Distribution

Critical
0
High
0
Medium
10
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
3

Age Distribution

Common Weaknesses (CWE)

1
XSS
9
2
SSRF
1

Most Affected Products

1. Gutenverse Gutenverse3
2. Gutenverse Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress2
3. Gutenverse Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem2
4. Jegstudio Gutenverse Wordpress2
5. Gutenverse Gutenverse Form1

Recent Vulnerabilities

See more →
CVE-2026-106469
CVSS 6.8medium

Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG Icon

Oct 14, 2026🔧 No Patch
CVE-2026-92746
CVSS 6.4medium

Gutenverse <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute

Sep 25, 2026🔧 No Patch
CVE-2026-19943
CVSS 6.4medium

Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute

Aug 25, 2026🔧 No Patch
CVE-2026-12399
CVSS 4.4medium

Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter

Jun 27, 2026🔧 No Patch
CVE-2026-2948
CVSS 6.4medium

Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'

May 5, 2026🔧 No Patch
CVE-2026-2868
CVSS 6.4medium

Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG'

May 5, 2026🔧 No Patch
CVE-2025-7727
CVSS 6.4EPSS 0%medium

Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks

Aug 6, 2025🔧 No Patch
CVE-2025-5234
CVSS 6.4EPSS 0%medium

Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter

Jun 19, 2025
CVE-2025-2893
CVSS 6.4medium

Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block

Apr 29, 2025
CVE-2024-3692
CVSS 6.1EPSS 0%medium

Gutenverse < 1.9.1 - Contributor+ Stored XSS

May 3, 2024🔧 No Patch

Monitor gutenverse in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.