CVE-2026-2924

CVE-2026-2924 affects the Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting flaw via the imageLoad parameter in versions up to and including 3.4.6, caused by insufficient input sanitization and output escaping. A...

PT-2024-37895 · Funnelkit · The Funnel Builder For Wordpress

Name of the Vulnerable Software and Affected Versions: The Funnel Builder for WordPress by FunnelKit versions up to, and including, 3.4.6 Description: The issue allows authenticated attackers with Contributor-level access and above to update multiple settings due to a missing capability check on...