CVE-2025-68511

MediumCVSS 6.5

Published: 24/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

16th percentile - higher than 16% of all known CVEs

Summary

The Gutenverse Form for WordPress contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 2.3.1.

Risk Assessment

An attacker may gain access to form functions without proper permissions, potentially leading to unauthorized data submission or settings modification.

Recommendation

Update Gutenverse Form to the latest version that includes the security fix.

Other vulnerabilities in Gutenverse Form

CVE-2025-14984Medium
The Gutenverse Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file upload in all versions up to, and including, 2.3.2. The plugin's framework component adds SVG to allowed MIME types without sanitizing SVG contents, allowing authenticated attackers with Author-level access and above to upload malicious SVG files.

Original NVD description (English source)

Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse Form: from n/a through <= 2.3.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS