Brainstormforce Spectra vulnerabilities

• brainstormforce spectra legacy – gutenberg blocks Spectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page', 'path', and 'settings' GET Parameters CVE-2026-92294 6.5 MediumOctober 31, 2026
• brainstormforce spectra legacy – gutenberg blocks Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure CVE-2026-16302 4.3 MediumSeptember 24, 2026
• brainstormforce spectra legacy – gutenberg blocks Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Block CVE-2026-12900 6.4 MediumJuly 20, 2026
• brainstormforce spectra gutenberg blocks – website builder for the block editor Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes CVE-2026-7465 Public exploit 8.8 HighMay 30, 2026
• brainstormforce spectra gutenberg blocks – website builder for the block editor Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data CVE-2026-0950 5.3 MediumFebruary 3, 2026
• brainstormforce spectra gutenberg blocks – website builder for the block editor Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS CVE-2025-11162 6.4 MediumNovember 5, 2025
• brainstormforce spectra gutenberg blocks – website builder for the block editor Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1784 6.4 MediumMarch 26, 2025
• brainstorm force spectra WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability CVE-2023-23825 3.1 LowDecember 9, 2024
• brainstorm force spectra WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability CVE-2023-23834 4.3 MediumDecember 9, 2024
• brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 more Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget CVE-2024-10484 6.4 MediumDecember 3, 2024
• brainstorm force spectra WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability CVE-2024-37517 4.3 MediumNovember 1, 2024
• brainstorm force spectra WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-7590 6.5 MediumAugust 12, 2024
• brainstorm force spectra WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability CVE-2023-36676 5.4 MediumJune 19, 2024
• brainstorm force spectra WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability CVE-2023-23738 5.3 MediumJune 3, 2024
• brainstorm force spectra WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection Vulnerability CVE-2023-23735 5.3 MediumJune 3, 2024
• brainstorm force spectra WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability CVE-2023-23730 5.3 MediumJune 3, 2024
• brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 more Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-4366 6.4 MediumMay 24, 2024
• brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 more Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block CVE-2024-1814 6.4 MediumMay 23, 2024
• brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 more Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block CVE-2024-1815 6.4 MediumMay 23, 2024
• brainstorm force spectra pro Spectra Pro <= 1.1.5 - Authenticated (Author+) Privilege Escalation CVE-2024-3828 8.8 HighMay 10, 2024
• brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 more Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal CVE-2024-3107 4.3 MediumMay 2, 2024
• brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 more Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS CVE-2023-6486 6.4 MediumApril 9, 2024
• brainstorm force spectra WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability CVE-2023-36679 7.1 HighMarch 28, 2024
• brainstorm force spectra – wordpress gutenberg blocks, brainstormforce spectra +1 more WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49833 6.5 MediumDecember 14, 2023
• brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 more Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization CVE-2020-36702 5.5 MediumJune 7, 2023
• brainstorm force spectra Spectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting CVE-2020-36656 5.4 MediumFebruary 21, 2023