Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Spectra — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in Spectra, with AI-generated Chinese analysis, references, and POCs.

This page is a vulnerability aggregation report for Spectra, an open-source software product from SpectraLogic Corporation, covering Common Weakness Enumerations (CWE) and associated CVE identifiers. It compiles known security flaws, ranging from critical privilege escalations to moderate information disclosures, spanning from the initial releases through 2024. The collected data includes official vendor advisories, public exploit details, and patch availability to provide a comprehensive view of the product's security posture over time. Users can utilize this resource to track a vendor's advisories and monitor the lifecycle of security updates for Spectra. It also allows researchers to understand a weakness class by examining how specific vulnerabilities manifest in this particular codebase, including root causes and affected components. Additionally, the page enables users to look up a product's vulnerability history, offering chronological context on when flaws were discovered, reported, and resolved. This aggregation helps security teams assess risk exposure and prioritize remediation efforts based on historical trends and current threat intelligence. By centralizing disparate data sources, the page eliminates the need to search multiple databases manually, streamlining the process of maintaining secure configurations. The content is strictly factual, focusing on technical details rather than promotional material, ensuring that administrators and developers can make informed decisions without distraction. This approach supports transparency and accountability in software security, encouraging continuous improvement in defense mechanisms against emerging threats.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-42648 WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability CWE-862 4.3 Medium2026-04-29
CVE-2026-24982 WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability CWE-862 5.3 Medium2026-02-03
CVE-2023-23729 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change Vulnerability CWE-862 5.4 Medium2025-12-09
CVE-2023-23825 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability CWE-862 3.1 Low2024-12-09
CVE-2023-23834 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability CWE-862 4.3 Medium2024-12-09
CVE-2024-37517 WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability CWE-862 4.3 Medium2024-11-01
CVE-2024-7590 WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-08-12
CVE-2023-36676 WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability CWE-862 5.4 Medium2024-06-19
CVE-2023-23738 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability CWE-74 5.3 Medium2024-06-03
CVE-2023-23735 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection Vulnerability CWE-80 5.3 Medium2024-06-03
CVE-2023-23730 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability CWE-307 5.3 Medium2024-06-03
CVE-2023-36679 WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability CWE-918 7.1 High2024-03-28
CVE-2020-36656 Spectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting 5.4 -2023-02-21

All 13 known CVE vulnerabilities affecting Spectra with full Chinese analysis, references, and POCs where available.