Medium
CVE-2026-16302
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 31
Reset filters
Medium
CVE-2026-12900
Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Block
Medium
CVE-2026-10827
Spectra Legacy – Gutenberg Blocks < 2.20.0 - Authenticated (Contributor+) CSS Injection
High
CVE-2026-7465
Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes
Medium
CVE-2026-42648
Spectra <= 2.19.22 - Missing Authorization
Medium
CVE-2026-0950
Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data
Medium
CVE-2026-24982
Spectra <= 2.19.17 - Missing Authorization
Medium
CVE-2025-11162
Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS
Medium
CVE-2025-1784
Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10484
Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget
Medium
CVE-2024-7590
Spectra – WordPress Gutenberg Blocks <= 2.15.0 - Authenticated (Contributor+) Stored Cross-site Scripting
Medium
CVE-2024-37517
Spectra <= 2.13.7 - Missing Authorization via generate_ai_content
Medium
CVE-2024-4366
Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-1814
Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block
Medium
CVE-2024-1815
Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block
Medium
CVE-2024-3107
Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal
Medium
CVE-2023-6486
Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS
Medium
CVE-2023-49833
Spectra <= 2.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
b139260b-7741-4e35-b23f-896f23719739
Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in template_importer
Medium
CVE-2023-36676
Spectra <= 2.6.6 - Missing Authorization
High
CVE-2023-36679
Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in import_wpforms
Medium
242e99d1-db27-45fa-a90d-5a26c2d1901b
Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Missing Authorization Checks
Medium
CVE-2023-23834
Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Cross-Site Request Forgery to Plugin Activation
Medium
CVE-2020-36656
Spectra – WordPress Gutenberg Blocks <= 1.14.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.