Threats tagged 'ghsa-hw9f-7c29-3p62'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-2948The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Server-Side Medium6.42026-05-05GCVE DatabaseCVE-2026-2948 The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress versions up to and including 3.5.3 contains a Server-Side Request Forgery (SSRF) vulnerability via the import_images() function. Authenticated users with contributor-level access or higher can exploit this flaw to make arbitrary web requests from the server, potentially accessing or modifying internal services. Report on CVE-2026-2948 Vulnerability CWE-918 #ghsa-hw9f-7c29-3p62	GCVE Database	2026-05-05

Page 1 of 1