Incorrect Permissions in Spectra Popup Builder REST Endpoints

The spectra-popup post type and its meta fields were exposed via the REST API with auth_callback __return_true, letting unauthenticated visitors read popups and their settings. The fix requires manage_options.

This vulnerability affects the following application versions:

• Spectra – WordPress Gutenberg Blocks 2.6.0
• Spectra – WordPress Gutenberg Blocks 2.6.1
• Spectra – WordPress Gutenberg Blocks 2.6.2
• Spectra – WordPress Gutenberg Blocks 2.6.3
• Spectra – WordPress Gutenberg Blocks 2.6.4
• Spectra – WordPress Gutenberg Blocks 2.6.5
• Spectra – WordPress Gutenberg Blocks 2.6.6
• Spectra – WordPress Gutenberg Blocks 2.6.7
• Spectra – WordPress Gutenberg Blocks 2.6.8
• Spectra – WordPress Gutenberg Blocks 2.6.9
• Spectra – WordPress Gutenberg Blocks 2.7.0
• Spectra – WordPress Gutenberg Blocks 2.7.1
• Spectra – WordPress Gutenberg Blocks 2.7.2
• Spectra – WordPress Gutenberg Blocks 2.7.3
• Spectra – WordPress Gutenberg Blocks 2.7.4
• Spectra – WordPress Gutenberg Blocks 2.7.5
• Spectra – WordPress Gutenberg Blocks 2.7.6
• Spectra – WordPress Gutenberg Blocks 2.7.7
• Spectra – WordPress Gutenberg Blocks 2.7.8
• Spectra – WordPress Gutenberg Blocks 2.7.9
• Spectra – WordPress Gutenberg Blocks 2.7.10
• Spectra – WordPress Gutenberg Blocks 2.7.11
• Spectra – WordPress Gutenberg Blocks 2.8.0
• Spectra – WordPress Gutenberg Blocks 2.9.0
• Spectra – WordPress Gutenberg Blocks 2.9.1
• Spectra – WordPress Gutenberg Blocks 2.10.0
• Spectra – WordPress Gutenberg Blocks 2.10.1
• Spectra – WordPress Gutenberg Blocks 2.10.2
• Spectra – WordPress Gutenberg Blocks 2.10.3
• Spectra – WordPress Gutenberg Blocks 2.10.4
• Spectra – WordPress Gutenberg Blocks 2.10.5
• Spectra – WordPress Gutenberg Blocks 2.11.0
• Spectra – WordPress Gutenberg Blocks 2.11.1
• Spectra – WordPress Gutenberg Blocks 2.11.2
• Spectra – WordPress Gutenberg Blocks 2.11.3
• Spectra – WordPress Gutenberg Blocks 2.11.4
• Spectra – WordPress Gutenberg Blocks 2.12.0
• Spectra – WordPress Gutenberg Blocks 2.12.1
• Spectra – WordPress Gutenberg Blocks 2.12.2
• Spectra – WordPress Gutenberg Blocks 2.12.3
• Spectra – WordPress Gutenberg Blocks 2.12.4
• Spectra – WordPress Gutenberg Blocks 2.12.5
• Spectra – WordPress Gutenberg Blocks 2.12.6
• Spectra – WordPress Gutenberg Blocks 2.12.7
• Spectra – WordPress Gutenberg Blocks 2.12.8
• Spectra – WordPress Gutenberg Blocks 2.12.9
• Spectra – WordPress Gutenberg Blocks 2.13.0
• Spectra – WordPress Gutenberg Blocks 2.13.1
• Spectra – WordPress Gutenberg Blocks 2.13.2
• Spectra – WordPress Gutenberg Blocks 2.13.3
• Spectra – WordPress Gutenberg Blocks 2.13.4
• Spectra – WordPress Gutenberg Blocks 2.13.5
• Spectra – WordPress Gutenberg Blocks 2.13.6
• Spectra – WordPress Gutenberg Blocks 2.13.7
• Spectra – WordPress Gutenberg Blocks 2.13.8
• Spectra – WordPress Gutenberg Blocks 2.13.9
• Spectra – WordPress Gutenberg Blocks 2.14.0
• Spectra – WordPress Gutenberg Blocks 2.14.1
• Spectra – WordPress Gutenberg Blocks 2.15.0
• Spectra – WordPress Gutenberg Blocks 2.15.1
• Spectra – WordPress Gutenberg Blocks 2.15.2
• Spectra – WordPress Gutenberg Blocks 2.15.3
• Spectra – WordPress Gutenberg Blocks 2.16.0
• Spectra – WordPress Gutenberg Blocks 2.16.1
• Spectra – WordPress Gutenberg Blocks 2.16.2
• Spectra – WordPress Gutenberg Blocks 2.16.3
• Spectra – WordPress Gutenberg Blocks 2.16.4
• Spectra – WordPress Gutenberg Blocks 2.16.5
• Spectra – WordPress Gutenberg Blocks 2.17.0
• Spectra – WordPress Gutenberg Blocks 2.18.0
• Spectra – WordPress Gutenberg Blocks 2.18.1
• Spectra – WordPress Gutenberg Blocks 2.18.2
• Spectra – WordPress Gutenberg Blocks 2.18.3
• Spectra – WordPress Gutenberg Blocks 2.19.0
• Spectra – WordPress Gutenberg Blocks 2.19.1
• Spectra – WordPress Gutenberg Blocks 2.19.2
• Spectra – WordPress Gutenberg Blocks 2.19.3
• Spectra – WordPress Gutenberg Blocks 2.19.4
• Spectra – WordPress Gutenberg Blocks 2.19.5
• Spectra – WordPress Gutenberg Blocks 2.19.6
• Spectra – WordPress Gutenberg Blocks 2.19.7
• Spectra – WordPress Gutenberg Blocks 2.19.8
• Spectra – WordPress Gutenberg Blocks 2.19.9
• Spectra – WordPress Gutenberg Blocks 2.19.10
• Spectra – WordPress Gutenberg Blocks 2.19.11
• Spectra – WordPress Gutenberg Blocks 2.19.11-beta.1
• Spectra – WordPress Gutenberg Blocks 2.19.12
• Spectra – WordPress Gutenberg Blocks 2.19.13
• Spectra – WordPress Gutenberg Blocks 2.19.14
• Spectra – WordPress Gutenberg Blocks 2.19.15
• Spectra – WordPress Gutenberg Blocks 2.19.16
• Spectra – WordPress Gutenberg Blocks 2.19.17
• Spectra – WordPress Gutenberg Blocks 3.0.0-beta.1
• Spectra – WordPress Gutenberg Blocks 3.0.0-beta.2