Plugin icon

Gutenverse – WordPress Blocks, Page Builder & Site Editor

gutenverse

Vulnerabilities:

14

Last Updated:

October 9, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-09-24
Title
Gutenverse < 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute
Fixed in
Fixed in 4.0.9
CVSS
5.5 (medium)
Published
2026-08-25
Title
Gutenverse < 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks
Fixed in
Fixed in 4.0.3
CVSS
5.5 (medium)
Published
2026-08-24
Title
Gutenverse < 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute
Fixed in
Fixed in 4.0.3
CVSS
5.5 (medium)
Published
2026-06-26
Title
Gutenverse < 3.8.1 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter
Fixed in
Fixed in 3.8.1
CVSS
4.4 (medium)
Published
2026-05-26
Title
Gutenverse < 3.4.7 - Reflected Cross-Site Scripting via 's' Parameter
Fixed in
Fixed in 3.4.7
CVSS
6.1 (medium)
Published
2026-05-04
Title
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem < 3.6.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'
Fixed in
Fixed in 3.6.0
CVSS
5.5 (medium)
Published
2026-05-04
Title
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem < 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG'
Fixed in
Fixed in 3.6.0
CVSS
5.5 (medium)
Published
2026-04-03
Title
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem < 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad'
Fixed in
Fixed in 3.4.7
CVSS
5.5 (medium)
Published
2025-11-28
Title
Gutenverse < 3.3.0 - Missing Authorization
Fixed in
Fixed in 3.3.0
CVSS
4.3 (medium)
Published
2025-08-05
Title
Gutenverse < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks
Fixed in
Fixed in 3.1.1
CVSS
6.4 (medium)
Published
2025-04-28
Title
Gutenverse < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block
Fixed in
Fixed in 3.0.0
CVSS
6.4 (medium)
Published
2024-08-26
Title
Gutenverse < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.0
CVSS
6.4 (medium)
Published
2024-07-19
Title
Gutenverse < 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.9.3
CVSS
6.4 (medium)
Published
2024-04-12
Title
Gutenverse < 1.9.1 - Contributor+ Stored XSS
Fixed in
Fixed in 1.9.1
CVSS
6.6 (medium)