Spectra Legacy – Gutenberg Blocks

Уязвимости

• CVE-2023-23834без авторизации · нужен клик≤ 2.3.0

  WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability

  Критич. 9.8

• CVE-2023-23825нужен вход≤ 2.3.0

  WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability

  Высокий 8.8

• CVE-2024-37517нужен вход≤ 2.13.7

  WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-36676нужен вход≤ 2.6.6

  WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2026-7465участник+≤ 2.19.25

  Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

  Высокий 8.8

• CVE-2023-36679нужен вход≤ 2.6.6

  WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability

  Средний 6.5

• CVE-2026-12900участник+≤ 2.19.28

  Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Block

  Средний 6.4

• CVE-2025-11162участник+≤ 2.19.14

  Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS

  Средний 6.4

• CVE-2025-1784участник+≤ 2.19.0

  Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2023-23735без авторизации≤ 2.3.0

  WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection Vulnerability

  Средний 6.1

• CVE-2024-7590нужен вход≤ 2.14.1

  WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2023-49833нужен вход≤ 2.7.9

  WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2023-23729участник+≤ 2.3.0

  WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change Vulnerability

  Средний 5.4

• CVE-2024-10484участник+≤ 2.16.2

  Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget

  Средний 5.4

• CVE-2024-1815участник+≤ 2.12.8

  Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block

  Средний 5.4

• CVE-2024-1814участник+≤ 2.12.8

  Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block

  Средний 5.4

• CVE-2023-6486участник+≤ 2.10.3

  Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS

  Средний 5.4

• CVE-2026-24982без авторизации≤ 2.19.17

  WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-0950без авторизации≤ 2.19.17

  Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data

  Средний 5.3

• CVE-2023-23738без авторизации≤ 2.3.0

  WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability

  Средний 5.3

• CVE-2023-23730без авторизации≤ 2.3.0

  WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability

  Средний 5.3

• CVE-2026-42648нужен вход≤ 2.19.22

  WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2024-3107участник+≤ 2.12.6

  Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal

  Средний 4.3