Access Control Vulnerability in Jegstudio Gutenverse News Product
CVE-2025-62090

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons
Vendor
CVE Published:
9 December 2025

What is CVE-2025-62090?

The Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons plugin by Jegstudio suffers from a missing authorization vulnerability. This issue arises from incorrectly configured access control security levels, allowing unauthorized users to perform actions that should be restricted. Consequently, this flaw could lead to significant data exposure and manipulation risks for installations using versions up to 3.0.2. Website administrators using this plugin should take immediate action to implement proper access controls to mitigate potential threats.

Affected Version(s)

Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons 0 <= 3.0.2

References

https://patchstack.com/database/Wordpress/Plugin/gutenver...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Denver Jackson | Patchstack Bug Bounty Program
.