Advisories · Technology
brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor.
Every CVE that names brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Privilege escalation
- CVSS 5.3 Medium
Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Information disclosure
- CVSS 6.4 Medium
Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Path traversal
- CVSS 6.4 Medium
Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization
- brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
- Broken access control