Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Spectra – WordPress Gutenberg Blocks 2.3.1

  • Severity: medium-risk
  • Status: Fixed
  • Publication: January 25, 2023

The Spectra WordPress Gutenberg Blocks plugin, which is used with WordPress, has a security vulnerability that allows users without permission to activate plugins, import blocks, and import forms from WPForms. This vulnerability exists in versions of the plugin up to and including version 2.3.1. This means that anyone with an account (even a subscriber account) can access these features without authorization.

Detected in:

Spectra – WordPress Gutenberg Blocks fixed vulnerable versions: >= * <= 2.3.1
Spectra Gutenberg Blocks – Website Builder for the Block Editor fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.