What’s Vulnerable › Products

Brainstorm Force Spectra vulnerabilities

25 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Brainstorm Force Spectra version is affected

Latest Brainstorm Force Spectra vulnerabilities

• CVE-2026-7465 — Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes (CVSS 8.8)
• CVE-2026-42648 — WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2026-24982 — WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-0950 — Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data (CVSS 5.3)
• CVE-2023-23729 — WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change Vulnerability (CVSS 5.4)
• CVE-2025-11162 — Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS (CVSS 6.4)
• CVE-2025-1784 — Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2023-23834 — WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability (CVSS 9.8)
• CVE-2023-23825 — WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability (CVSS 8.8)
• CVE-2024-10484 — Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget (CVSS 5.4)
• CVE-2024-37517 — WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-7590 — WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2023-36676 — WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2023-23738 — WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability (CVSS 5.3)
• CVE-2023-23735 — WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection Vulnerability (CVSS 6.1)
• CVE-2023-23730 — WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability (CVSS 5.3)
• CVE-2024-4366 — Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-1815 — Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block (CVSS 5.4)
• CVE-2024-1814 — Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block (CVSS 5.4)
• CVE-2024-3107 — Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal (CVSS 4.3)
• CVE-2023-6486 — Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS (CVSS 5.4)
• CVE-2023-36679 — WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.5)
• CVE-2023-49833 — WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2020-36702 — Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization (CVSS 4.3)
• CVE-2020-36656 — Spectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting (CVSS 5.4)