Gutenverse Companion
Gutenverse Companion has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of August 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include Server-Side Request Forgery (SSRF).
Every one of the 2 issues recorded for Gutenverse Companion has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Gutenverse Companion is installed on roughly 8,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-66704Gutenverse Companion <= 2.5.1 - Unauthenticated Server-Side Request Forgery
Read the full analysisVulnerability Records
Gutenverse Companion
Author
Jegstudio
A companion plugin designed specifically to enhance and extend the functionality of Gutenverse base themes. This plugin integrates seamlessly with the base themes, providing additional features, customization options, and advanced tools to optimize the overall user experience and streamline the development process. Use of 3rd-Party Services To improve the user experience, Gutenverse Companion may use the following third-party service: Gutenverse Companion List Service This service is used to fetch the list of companion demos for the Gutenverse theme. It allows users to view and select from various demo templates compatible with the theme they are using. The service retrieves a list of demos based on the current theme, enabling users to browse and install demos according to their preferences. Service Endpoint: https://gutenverse.com/wp-json/gutenverse-server/v4/companion/list Purpose: To fetch the companion demo list for the user’s current theme. Usage: The returned demo list helps users quickly find and install demos suitable for their selected theme, streamlining the process of setting up a new site or changing the look and feel of an existing one. Circumstance: This service is typically used within the Companion Import Wizard on the WordPress dashboard, where users can select and import demos directly from the interface based on the theme they have installed. Data Sent: The service only sends information about the Gutenverse theme currently in use by the user. No additional data is transmitted, ensuring that only relevant demos for that specific theme are returned. This data is securely sent to our server at gutenverse.com. Rest assured, no information is transmitted automatically without your explicit consent. If you’d like more details about Gutenverse, you can check out the terms and conditions here! COMMUNITY Join our communities and share your experiences with us. OUR COMMUNITIES Join the Facebook Group! Follow us on Twitter! Follow us on Instagram! Check our TikTok! REPOSOTORY Check out our repository at GitHub. You’re welcome to report bugs or request features.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C