Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Spectra – WordPress Gutenberg Blocks 2.7.9

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 5, 2023

The Spectra plugin for WordPress is vulnerable to a type of security risk called Stored Cross-Site Scripting in versions 2.7.9 and earlier. This security risk allows someone with contributor-level access or higher to insert malicious web scripts on pages. These scripts will be executed whenever someone visits the page. To protect yourself from this vulnerability you should upgrade to the latest version of the plugin.

Detected in:

Spectra – WordPress Gutenberg Blocks fixed vulnerable versions: >= * <= 2.7.9
Spectra Gutenberg Blocks – Website Builder for the Block Editor fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.