Jegstudio Vulnerabilities and Affected Products
Vulnerabilities associated with Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons.
Products
Clear product- Gutenverse5 vulnerabilities
- Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem5 vulnerabilities
- Gutenverse Companion2 vulnerabilities
- Gutenverse Form2 vulnerabilities
- Gutenverse – WordPress Blocks, Page Builder & Site Editor2 vulnerabilities
- Financio1 vulnerability
- Gutenverse Form – Contact Form Builder, Booking, Reservation, Subscribe for Block Editor1 vulnerability
- Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons1 vulnerability
- Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons1 vulnerability
- Startupzy1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-5234MEDIUM | Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId ParameterThe Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CWE-79Jun 19, 2025 | CVSS6.4v3.1 | EPSS0.211% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |