Reflected Cross-Site Scripting Vulnerability in Gutenverse Plugin for WordPress
CVE-2026-3001

6.1MEDIUM

Key Information:

Vendor

WordPress
Status
Gutenverse – WordPress Blocks, Page Builder & Site Editor
Vendor
CVE Published:
27 May 2026

What is CVE-2026-3001?

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting through the 's' parameter in all versions up to 3.4.6. This vulnerability arises from inadequate input sanitization and output escaping. Specifically, the render_content() method in class-search-result-title.php outputs the result of get_query_var('s') directly in the HTML without any sanitization measures like esc_html(). As a result, unauthenticated attackers can exploit this vulnerability by injecting malicious web scripts into pages via specially crafted URLs. If a user clicks the malicious link while the gutenverse/search-result-title block is active on the site’s search results template, the injected scripts will execute, potentially compromising user data and site integrity.

Affected Version(s)

Gutenverse – WordPress Blocks, Page Builder & Site Editor 0 <= 3.4.6

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/gutenverse/tru...
https://plugins.trac.wordpress.org/changeset/3468383/

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Osvaldo Noe Gonzalez Del Rio
.