Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Jegstudio vulnerabilities

23 published CVEs name Jegstudio among the affected products.

Published CVEs
23
Last 12 months
16
Critical
0
Known exploited
0

Critical 0High 2Medium 21Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20244
  2. 20257
  3. 202612

Newest CVEs

  • CVE-2026-92746

    Gutenverse <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute

    jegstudio · Gutenverse – WordPress Blocks, Page Builder & Site Editor

    Medium6.4
  • CVE-2026-3002

    Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks

    jegstudio · Gutenverse – WordPress Blocks, Page Builder & Site Editor

    Medium6.4
  • CVE-2026-19943

    Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute

    jegstudio · Gutenverse – WordPress Blocks, Page Builder & Site Editor

    Medium6.4
  • CVE-2026-66704

    WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability

    Jegstudio · Gutenverse Companion

    High7.2
  • CVE-2026-12399

    Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter

    jegstudio · Gutenverse – WordPress Blocks, Page Builder & Site Editor

    Medium4.4
  • CVE-2026-54832

    WordPress Gutenverse Companion plugin <= 2.5.0 - Broken Access Control vulnerability

    Jegstudio · Gutenverse Companion

    High7.5
  • CVE-2024-33685

    WordPress Startupzy theme <= 1.1.1 - Broken Access Control vulnerability

    Jegstudio · Startupzy

    Medium4.3
  • CVE-2026-3001

    Gutenverse <= 3.4.6 - Reflected Cross-Site Scripting via 's' Parameter

    jegstudio · Gutenverse – WordPress Blocks, Page Builder & Site Editor

    Medium6.1
  • CVE-2026-2948

    Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'

    jegstudio · Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem

    Medium6.4
  • CVE-2026-2868

    Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG'

    jegstudio · Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem

    Medium6.4