Plugin icon

Gutenverse – WordPress Blocks, Page Builder & Site Editor

gutenverse

Vulnerabilities:

9

Last Updated:

May 13, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-05-04
Title
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem < 3.6.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'
Fixed in
Fixed in 3.6.0
CVSS
5.5 (medium)
Published
2026-05-04
Title
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem < 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG'
Fixed in
Fixed in 3.6.0
CVSS
5.5 (medium)
Published
2026-04-03
Title
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem < 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad'
Fixed in
Fixed in 3.4.7
CVSS
5.5 (medium)
Published
2025-11-28
Title
Gutenverse < 3.3.0 - Missing Authorization
Fixed in
Fixed in 3.3.0
CVSS
4.3 (medium)
Published
2025-08-05
Title
Gutenverse < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks
Fixed in
Fixed in 3.1.1
CVSS
6.4 (medium)
Published
2025-04-28
Title
Gutenverse < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block
Fixed in
Fixed in 3.0.0
CVSS
6.4 (medium)
Published
2024-08-26
Title
Gutenverse < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.0
CVSS
6.4 (medium)
Published
2024-07-19
Title
Gutenverse < 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.9.3
CVSS
6.4 (medium)
Published
2024-04-12
Title
Gutenverse < 1.9.1 - Contributor+ Stored XSS
Fixed in
Fixed in 1.9.1
CVSS
6.6 (medium)