Unauthenticated Cross Site Scripting Vulnerability in Gutenverse Form Plugin
CVE-2026-56040

7.1HIGH

Key Information:

Vendor

WordPress
Status
Gutenverse Form
Vendor
CVE Published:
26 June 2026

What is CVE-2026-56040?

The Gutenverse Form plugin for WordPress versions up to 2.4.7 contains a vulnerability that allows unauthenticated users to execute arbitrary JavaScript code. This can lead to unauthorized actions on behalf of the user, data theft, or the display of misleading content. Ensuring your plugins are updated to the latest version is essential in mitigating such risks.

Affected Version(s)

Gutenverse Form <= 2.4.7

References

https://patchstack.com/database/wordpress/plugin/gutenver...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

hivesec | Patchstack Bug Bounty Program
.