VendorsBrainstorm Forcespectraany version
Vulnerabilities

Brainstorm Force Spectra any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

18CVEs
CVE-2023-23834
WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability
Published 2024-12-09 · Modified
9.8EPSS 0.007
CVE-2023-23825
WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability
Published 2024-12-09 · Modified
8.8EPSS 0.005
CVE-2023-36676
WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability
Published 2024-06-19 · Modified
8.8EPSS 0.005
CVE-2024-37517
WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability
Published 2024-11-01 · Analyzed
8.8EPSS 0.004
CVE-2023-36679
WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability
Published 2024-03-28 · Modified
7.1EPSS 0.004
CVE-2023-49833
WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-14 · Modified
6.5EPSS 0.006
CVE-2024-7590
WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability
Published 2024-08-12 · Modified
6.5EPSS 0.003
CVE-2023-6486
Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS
Published 2024-04-09 · Modified
6.4EPSS 0.006
CVE-2024-10484
Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget
Published 2024-12-03 · Analyzed
6.4EPSS 0.003
CVE-2024-1815
Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block
Published 2024-05-23 · Modified
6.4EPSS 0.003
CVE-2024-4366
Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting
Published 2024-05-24 · Modified
6.4EPSS 0.003
CVE-2024-1814
Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block
Published 2024-05-23 · Modified
6.4EPSS 0.003
CVE-2023-23735
WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection Vulnerability
Published 2024-06-03 · Analyzed
6.1EPSS 0.003
CVE-2020-36702
Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization
Published 2023-06-07 · Modified
5.5EPSS 0.004
CVE-2020-36656
Spectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting
Published 2023-02-21 · Modified
5.4EPSS 0.005
CVE-2023-23730
WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability
Published 2024-06-03 · Analyzed
5.3EPSS 0.004
CVE-2023-23738
WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability
Published 2024-06-03 · Analyzed
5.3EPSS 0.003
CVE-2024-3107
Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal
Published 2024-05-02 · Modified
4.3EPSS 0.006