https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:25:15.196891+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330953 EUVD-2026-330953 2026-10-07T04:25:15.244312+00:00 EUVD-2026-330953 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12399 fkie_cve-2026-12399 2026-10-07T04:25:15.244353+00:00

The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

 https://cve.radiocsirt.org/vuln/ghsa-pgr2-vvf9-xmqw GHSA-pgr2-vvf9-xmqw 2026-10-07T04:25:15.244393+00:00

The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.