Medium 6.4
2026-05-05< 3.6.0
CVE-2026-2948
Minimum safe version
3.6.0
Update to 3.6.0 or later to address 10 fixable vulnerabilities
CVE-2026-2948
CVE-2026-2868
Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad'
Gutenverse <= 3.2.1 - Missing Authorization
Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks
Gutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block
CVE-2024-43920
CVE-2024-38785
CVE-2024-3692
CVE-2023-35875