Authenticated (contributor+) stored cross-site scripting via custom page-level css

Skrevet den af i Spectra – WordPress Gutenberg Blocks

Due to insufficient input sanitization and output escaping, it makes possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0
  • Spectra – WordPress Gutenberg Blocks 2.18.1
  • Spectra – WordPress Gutenberg Blocks 2.18.2
  • Spectra – WordPress Gutenberg Blocks 2.18.3
  • Spectra – WordPress Gutenberg Blocks 2.19.0
  • Spectra – WordPress Gutenberg Blocks 2.19.1
  • Spectra – WordPress Gutenberg Blocks 2.19.2
  • Spectra – WordPress Gutenberg Blocks 2.19.3
  • Spectra – WordPress Gutenberg Blocks 2.19.4
  • Spectra – WordPress Gutenberg Blocks 2.19.5
  • Spectra – WordPress Gutenberg Blocks 2.19.6
  • Spectra – WordPress Gutenberg Blocks 2.19.7
  • Spectra – WordPress Gutenberg Blocks 2.19.8
  • Spectra – WordPress Gutenberg Blocks 2.19.9
  • Spectra – WordPress Gutenberg Blocks 2.19.10
  • Spectra – WordPress Gutenberg Blocks 2.19.11
  • Spectra – WordPress Gutenberg Blocks 2.19.11-beta.1
  • Spectra – WordPress Gutenberg Blocks 2.19.12
  • Spectra – WordPress Gutenberg Blocks 2.19.13
  • Spectra – WordPress Gutenberg Blocks 2.19.14

CSRF and access control vulnerability in notice dismissal handler

Skrevet den af i Spectra – WordPress Gutenberg Blocks

Cross-site request forgery possible because the code did not validate the wordpress security nonce before processing dismissal requests. This could allow any external site or attacker to craft a POST request that could be executed in the context of an authenticated wordpress user.

This vulnerability affects the following application versions:

  • Ultimate Addons for Elementor 1.6.34
  • Ultimate Addons for Elementor 1.6.35
  • Ultimate Addons for Elementor 1.6.36
  • Ultimate Addons for Elementor 1.6.37
  • Ultimate Addons for Elementor 2.0.0
  • Ultimate Addons for Elementor 2.0.1
  • Ultimate Addons for Elementor 2.0.2
  • Ultimate Addons for Elementor 2.0.3
  • Ultimate Addons for Elementor 2.0.4
  • Ultimate Addons for Elementor 2.0.5
  • Ultimate Addons for Elementor 2.0.6
  • Ultimate Addons for Elementor 2.1.0
  • Spectra – WordPress Gutenberg Blocks 1.24.0
  • Spectra – WordPress Gutenberg Blocks 1.24.1
  • Spectra – WordPress Gutenberg Blocks 1.24.2
  • Spectra – WordPress Gutenberg Blocks 1.25.0
  • Spectra – WordPress Gutenberg Blocks 1.25.1
  • Spectra – WordPress Gutenberg Blocks 1.25.2
  • Spectra – WordPress Gutenberg Blocks 1.25.3
  • Spectra – WordPress Gutenberg Blocks 1.25.4
  • Spectra – WordPress Gutenberg Blocks 1.25.5
  • Spectra – WordPress Gutenberg Blocks 1.25.6
  • Spectra – WordPress Gutenberg Blocks 2.0.0
  • Spectra – WordPress Gutenberg Blocks 2.0.1
  • Spectra – WordPress Gutenberg Blocks 2.0.2
  • Spectra – WordPress Gutenberg Blocks 2.0.3
  • Spectra – WordPress Gutenberg Blocks 2.0.4
  • Spectra – WordPress Gutenberg Blocks 2.0.5
  • Spectra – WordPress Gutenberg Blocks 2.0.6
  • Spectra – WordPress Gutenberg Blocks 2.0.7
  • Spectra – WordPress Gutenberg Blocks 2.0.8
  • Spectra – WordPress Gutenberg Blocks 2.0.9
  • Spectra – WordPress Gutenberg Blocks 2.0.10
  • Spectra – WordPress Gutenberg Blocks 2.0.11
  • Spectra – WordPress Gutenberg Blocks 2.0.12
  • Spectra – WordPress Gutenberg Blocks 2.0.13
  • Spectra – WordPress Gutenberg Blocks 2.0.14
  • Spectra – WordPress Gutenberg Blocks 2.0.15
  • Spectra – WordPress Gutenberg Blocks 2.0.16
  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0
  • Spectra – WordPress Gutenberg Blocks 2.18.1
  • Spectra – WordPress Gutenberg Blocks 2.18.2
  • Spectra – WordPress Gutenberg Blocks 2.18.3
  • Spectra – WordPress Gutenberg Blocks 2.19.0
  • Spectra – WordPress Gutenberg Blocks 2.19.1
  • Spectra – WordPress Gutenberg Blocks 2.19.2
  • Starter Templates – AI-Powered Templates 3.1.12
  • Starter Templates – AI-Powered Templates 3.1.13
  • Starter Templates – AI-Powered Templates 3.1.14
  • Starter Templates – AI-Powered Templates 3.1.15
  • Starter Templates – AI-Powered Templates 3.1.16
  • Starter Templates – AI-Powered Templates 3.5.3
  • Starter Templates – AI-Powered Templates 4.0.0
  • Starter Templates – AI-Powered Templates 4.0.1
  • Starter Templates – AI-Powered Templates 4.0.2
  • Starter Templates – AI-Powered Templates 4.0.3
  • Starter Templates – AI-Powered Templates 4.0.4
  • Starter Templates – AI-Powered Templates 4.0.5
  • Starter Templates – AI-Powered Templates 4.0.6
  • Starter Templates – AI-Powered Templates 4.0.7
  • Starter Templates – AI-Powered Templates 4.0.8
  • Starter Templates – AI-Powered Templates 4.0.9
  • Starter Templates – AI-Powered Templates 4.0.10
  • Starter Templates – AI-Powered Templates 4.0.11
  • Starter Templates – AI-Powered Templates 4.0.12
  • Starter Templates – AI-Powered Templates 4.0.13

XSS in the blocks config

Skrevet den af i Spectra – WordPress Gutenberg Blocks

The page limit attributes of the pagination are not properly sanitized to prevent an XSS attack.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 1.5.1
  • Spectra – WordPress Gutenberg Blocks 1.15.0
  • Spectra – WordPress Gutenberg Blocks 1.15.1
  • Spectra – WordPress Gutenberg Blocks 1.15.2
  • Spectra – WordPress Gutenberg Blocks 1.16.0
  • Spectra – WordPress Gutenberg Blocks 1.16.1
  • Spectra – WordPress Gutenberg Blocks 1.17.0
  • Spectra – WordPress Gutenberg Blocks 1.18.0
  • Spectra – WordPress Gutenberg Blocks 1.18.1
  • Spectra – WordPress Gutenberg Blocks 1.18.2
  • Spectra – WordPress Gutenberg Blocks 1.19.0
  • Spectra – WordPress Gutenberg Blocks 1.20.0
  • Spectra – WordPress Gutenberg Blocks 1.20.1
  • Spectra – WordPress Gutenberg Blocks 1.21.0
  • Spectra – WordPress Gutenberg Blocks 1.21.1
  • Spectra – WordPress Gutenberg Blocks 1.22.0
  • Spectra – WordPress Gutenberg Blocks 1.22.1
  • Spectra – WordPress Gutenberg Blocks 1.22.2
  • Spectra – WordPress Gutenberg Blocks 1.22.3
  • Spectra – WordPress Gutenberg Blocks 1.22.4
  • Spectra – WordPress Gutenberg Blocks 1.22.5
  • Spectra – WordPress Gutenberg Blocks 1.23.0
  • Spectra – WordPress Gutenberg Blocks 1.23.1
  • Spectra – WordPress Gutenberg Blocks 1.23.2
  • Spectra – WordPress Gutenberg Blocks 1.23.3
  • Spectra – WordPress Gutenberg Blocks 1.23.4
  • Spectra – WordPress Gutenberg Blocks 1.23.5
  • Spectra – WordPress Gutenberg Blocks 1.24.0
  • Spectra – WordPress Gutenberg Blocks 1.24.1
  • Spectra – WordPress Gutenberg Blocks 1.24.2
  • Spectra – WordPress Gutenberg Blocks 1.25.0
  • Spectra – WordPress Gutenberg Blocks 1.25.1
  • Spectra – WordPress Gutenberg Blocks 1.25.2
  • Spectra – WordPress Gutenberg Blocks 1.25.3
  • Spectra – WordPress Gutenberg Blocks 1.25.4
  • Spectra – WordPress Gutenberg Blocks 1.25.5
  • Spectra – WordPress Gutenberg Blocks 1.25.6
  • Spectra – WordPress Gutenberg Blocks 2.0.0
  • Spectra – WordPress Gutenberg Blocks 2.0.1
  • Spectra – WordPress Gutenberg Blocks 2.0.2
  • Spectra – WordPress Gutenberg Blocks 2.0.3
  • Spectra – WordPress Gutenberg Blocks 2.0.4
  • Spectra – WordPress Gutenberg Blocks 2.0.5
  • Spectra – WordPress Gutenberg Blocks 2.0.6
  • Spectra – WordPress Gutenberg Blocks 2.0.7
  • Spectra – WordPress Gutenberg Blocks 2.0.8
  • Spectra – WordPress Gutenberg Blocks 2.0.9
  • Spectra – WordPress Gutenberg Blocks 2.0.10
  • Spectra – WordPress Gutenberg Blocks 2.0.11
  • Spectra – WordPress Gutenberg Blocks 2.0.12
  • Spectra – WordPress Gutenberg Blocks 2.0.13
  • Spectra – WordPress Gutenberg Blocks 2.0.14
  • Spectra – WordPress Gutenberg Blocks 2.0.15
  • Spectra – WordPress Gutenberg Blocks 2.0.16
  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0

Incorrect permission via the categories api

Skrevet den af i Spectra – WordPress Gutenberg Blocks

This fix adds a permission check to restrict access to the Categories API. It ensures that only users with the manage_ast_block_templates capability can perform certain actions, preventing unauthorized users from accessing or modifying category data. This improves security by enforcing proper access controls.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Starter Templates – AI-Powered Templates 0.4.4.0
  • Starter Templates – AI-Powered Templates 3.5.0
  • Starter Templates – AI-Powered Templates 3.5.2
  • Starter Templates – AI-Powered Templates 3.5.3
  • Starter Templates – AI-Powered Templates 3.5.4
  • Starter Templates – AI-Powered Templates 3.5.5
  • Starter Templates – AI-Powered Templates 3.5.6
  • Starter Templates – AI-Powered Templates 3.5.7
  • Starter Templates – AI-Powered Templates 4.0.0
  • Starter Templates – AI-Powered Templates 4.0.1
  • Starter Templates – AI-Powered Templates 4.0.2
  • Starter Templates – AI-Powered Templates 4.0.3
  • Starter Templates – AI-Powered Templates 4.0.4
  • Starter Templates – AI-Powered Templates 4.0.5
  • Starter Templates – AI-Powered Templates 4.0.6
  • Starter Templates – AI-Powered Templates 4.0.7
  • Starter Templates – AI-Powered Templates 4.0.8
  • Starter Templates – AI-Powered Templates 4.0.9
  • Starter Templates – AI-Powered Templates 4.0.10
  • Starter Templates – AI-Powered Templates 4.0.11
  • Starter Templates – AI-Powered Templates 4.0.12
  • Starter Templates – AI-Powered Templates 4.0.13
  • Starter Templates – AI-Powered Templates 4.1.0
  • Starter Templates – AI-Powered Templates 4.1.1
  • Starter Templates – AI-Powered Templates 4.1.2
  • Starter Templates – AI-Powered Templates 4.1.3
  • Starter Templates – AI-Powered Templates 4.1.4
  • Starter Templates – AI-Powered Templates 4.1.5
  • Starter Templates – AI-Powered Templates 4.1.6
  • Starter Templates – AI-Powered Templates 4.1.7
  • Starter Templates – AI-Powered Templates 4.2.0
  • Starter Templates – AI-Powered Templates 4.2.1
  • Starter Templates – AI-Powered Templates 4.2.2
  • Starter Templates – AI-Powered Templates 4.2.3
  • Starter Templates – AI-Powered Templates 4.2.4
  • Starter Templates – AI-Powered Templates 4.2.5
  • Starter Templates – AI-Powered Templates 4.2.6
  • Starter Templates – AI-Powered Templates 4.3.0
  • Starter Templates – AI-Powered Templates 4.3.1
  • Starter Templates – AI-Powered Templates 4.3.2
  • Starter Templates – AI-Powered Templates 4.3.3
  • Starter Templates – AI-Powered Templates 4.3.4
  • Starter Templates – AI-Powered Templates 4.3.5
  • Starter Templates – AI-Powered Templates 4.3.6
  • Starter Templates – AI-Powered Templates 4.3.7
  • Starter Templates – AI-Powered Templates 4.3.8
  • Starter Templates – AI-Powered Templates 4.3.9
  • Starter Templates – AI-Powered Templates 4.4.0
  • Starter Templates – AI-Powered Templates 4.4.1

Insecure Hardcoded URL Parameter Leading to Potential Attacks

Skrevet den af i Spectra – WordPress Gutenberg Blocks

ZIP_AI_CREDIT_TOPUP_URL is not strictly validated or sanitized, an attacker could craft a malicious URL and inject arbitrary parameters, leading to phishing, open redirects, or unauthorized actions on external services

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1

Xss vectors in different sections

Skrevet den af i Spectra – WordPress Gutenberg Blocks

An invalid sanitation and validation leads to an XSS attack in the frontend js and url attributes.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4