Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Jegstudio — Vulnerabilities & Security Advisories 23

Browse all 23 CVE security advisories affecting Jegstudio. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Jegstudio develops software tools for digital content creation and management, with its products primarily used by creative professionals and small businesses. Historically, their applications have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and insecure authentication mechanisms. The company has addressed multiple security flaws in its web-based platforms, with 15 CVEs documented to date, reflecting ongoing challenges in secure coding practices. While no major public security incidents have been reported, the consistent pattern of vulnerabilities suggests a need for strengthened security testing and developer training across their product portfolio.

CVE ID Title CVSS Severity Published
CVE-2026-92746 Gutenverse <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comment Block 'suffixMain' Attribute — Gutenverse – WordPress Blocks, Page Builder & Site Editor CWE-79 6.4 Medium 2026-09-25
CVE-2026-3002 Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Blocks — Gutenverse – WordPress Blocks, Page Builder & Site Editor CWE-79 6.4 Medium 2026-08-26
CVE-2026-19943 Gutenverse <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute — Gutenverse – WordPress Blocks, Page Builder & Site Editor CWE-79 6.4 Medium 2026-08-25
CVE-2026-66704 WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability — Gutenverse Companion CWE-918 7.2 High 2026-08-13
CVE-2026-12399 Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter — Gutenverse – WordPress Blocks, Page Builder & Site Editor CWE-79 4.4 Medium 2026-06-27
CVE-2026-54832 WordPress Gutenverse Companion plugin <= 2.5.0 - Broken Access Control vulnerability — Gutenverse Companion CWE-862 7.5 High 2026-06-26
CVE-2024-33685 WordPress Startupzy theme <= 1.1.1 - Broken Access Control vulnerability — Startupzy CWE-862 4.3 Medium 2026-06-17
CVE-2026-3001 Gutenverse <= 3.4.6 - Reflected Cross-Site Scripting via 's' Parameter — Gutenverse – WordPress Blocks, Page Builder & Site Editor CWE-79 6.1 Medium 2026-05-27
CVE-2026-2948 Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl' — Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem CWE-918 6.4 Medium 2026-05-05
CVE-2026-2868 Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'separatorIconSVG' — Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem CWE-79 6.4 Medium 2026-05-05
CVE-2026-2924 Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad' — Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem CWE-79 6.4 Medium 2026-04-04
CVE-2025-14984 Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload — Gutenverse Form – Contact Form Builder, Booking, Reservation, Subscribe for Block Editor CWE-79 6.4 Medium 2026-01-08
CVE-2025-68511 WordPress Gutenverse Form plugin <= 2.3.1 - Broken Access Control vulnerability — Gutenverse Form CWE-862 6.5 Medium 2025-12-24
CVE-2025-62090 WordPress Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons plugin <= 3.0.2 - Broken Access Control vulnerability — Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons CWE-862 6.5 Medium 2025-12-09
CVE-2025-66079 WordPress Gutenverse Form plugin <= 2.2.0 - Broken Access Control vulnerability — Gutenverse Form CWE-862 6.5 Medium 2025-11-21
CVE-2025-66065 WordPress Gutenverse plugin <= 3.2.1 - Broken Access Control vulnerability — Gutenverse CWE-862 6.5 Medium 2025-11-21
CVE-2025-7727 Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks — Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem CWE-79 6.4 Medium 2025-08-06
CVE-2025-5234 Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter — Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons CWE-79 6.4 Medium 2025-06-19
CVE-2025-2893 Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block — Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem CWE-79 6.4 Medium 2025-04-29
CVE-2023-35875 WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability — Gutenverse CWE-862 5.3 Medium 2024-12-13
CVE-2024-43920 WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability — Gutenverse CWE-79 6.5 Medium 2024-08-29
CVE-2024-38785 WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability — Gutenverse CWE-79 6.5 Medium 2024-07-21
CVE-2024-33690 WordPress Financio theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability — Financio CWE-352 4.3 Medium 2024-04-26

This page lists every published CVE security advisory associated with Jegstudio. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.