Stored Cross-Site Scripting in Spectra Testimonial Block Carousel Arrows

Skrevet den af i Spectra – WordPress Gutenberg Blocks

An author or contributor can store script in Spectra Testimonial block arrow settings, which are concatenated unescaped into the carousel arrow markup and injected into the page by the slider. Affects Spectra before 2.12.9.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 1.5.1
  • Spectra – WordPress Gutenberg Blocks 1.6.0
  • Spectra – WordPress Gutenberg Blocks 1.6.1
  • Spectra – WordPress Gutenberg Blocks 1.6.2
  • Spectra – WordPress Gutenberg Blocks 1.7.0
  • Spectra – WordPress Gutenberg Blocks 1.8.0
  • Spectra – WordPress Gutenberg Blocks 1.8.1
  • Spectra – WordPress Gutenberg Blocks 1.8.2
  • Spectra – WordPress Gutenberg Blocks 1.9.0
  • Spectra – WordPress Gutenberg Blocks 1.9.1
  • Spectra – WordPress Gutenberg Blocks 1.10.0
  • Spectra – WordPress Gutenberg Blocks 1.11.0
  • Spectra – WordPress Gutenberg Blocks 1.11.1
  • Spectra – WordPress Gutenberg Blocks 1.12.0
  • Spectra – WordPress Gutenberg Blocks 1.12.1
  • Spectra – WordPress Gutenberg Blocks 1.12.2
  • Spectra – WordPress Gutenberg Blocks 1.12.3
  • Spectra – WordPress Gutenberg Blocks 1.12.4
  • Spectra – WordPress Gutenberg Blocks 1.12.5
  • Spectra – WordPress Gutenberg Blocks 1.13.0
  • Spectra – WordPress Gutenberg Blocks 1.13.1
  • Spectra – WordPress Gutenberg Blocks 1.13.2
  • Spectra – WordPress Gutenberg Blocks 1.13.3
  • Spectra – WordPress Gutenberg Blocks 1.13.4
  • Spectra – WordPress Gutenberg Blocks 1.13.5
  • Spectra – WordPress Gutenberg Blocks 1.13.6
  • Spectra – WordPress Gutenberg Blocks 1.14.0
  • Spectra – WordPress Gutenberg Blocks 1.14.1
  • Spectra – WordPress Gutenberg Blocks 1.14.2
  • Spectra – WordPress Gutenberg Blocks 1.14.3
  • Spectra – WordPress Gutenberg Blocks 1.14.4
  • Spectra – WordPress Gutenberg Blocks 1.14.5
  • Spectra – WordPress Gutenberg Blocks 1.14.6
  • Spectra – WordPress Gutenberg Blocks 1.14.7
  • Spectra – WordPress Gutenberg Blocks 1.14.8
  • Spectra – WordPress Gutenberg Blocks 1.14.9
  • Spectra – WordPress Gutenberg Blocks 1.14.10
  • Spectra – WordPress Gutenberg Blocks 1.14.11
  • Spectra – WordPress Gutenberg Blocks 1.15.0
  • Spectra – WordPress Gutenberg Blocks 1.15.1
  • Spectra – WordPress Gutenberg Blocks 1.15.2
  • Spectra – WordPress Gutenberg Blocks 1.16.0
  • Spectra – WordPress Gutenberg Blocks 1.16.1
  • Spectra – WordPress Gutenberg Blocks 1.17.0
  • Spectra – WordPress Gutenberg Blocks 1.18.0
  • Spectra – WordPress Gutenberg Blocks 1.18.1
  • Spectra – WordPress Gutenberg Blocks 1.18.2
  • Spectra – WordPress Gutenberg Blocks 1.19.0
  • Spectra – WordPress Gutenberg Blocks 1.20.0
  • Spectra – WordPress Gutenberg Blocks 1.20.1
  • Spectra – WordPress Gutenberg Blocks 1.21.0
  • Spectra – WordPress Gutenberg Blocks 1.21.1
  • Spectra – WordPress Gutenberg Blocks 1.22.0
  • Spectra – WordPress Gutenberg Blocks 1.22.1
  • Spectra – WordPress Gutenberg Blocks 1.22.2
  • Spectra – WordPress Gutenberg Blocks 1.22.3
  • Spectra – WordPress Gutenberg Blocks 1.22.4
  • Spectra – WordPress Gutenberg Blocks 1.22.5
  • Spectra – WordPress Gutenberg Blocks 1.23.0
  • Spectra – WordPress Gutenberg Blocks 1.23.1
  • Spectra – WordPress Gutenberg Blocks 1.23.2
  • Spectra – WordPress Gutenberg Blocks 1.23.3
  • Spectra – WordPress Gutenberg Blocks 1.23.4
  • Spectra – WordPress Gutenberg Blocks 1.23.5
  • Spectra – WordPress Gutenberg Blocks 1.24.0
  • Spectra – WordPress Gutenberg Blocks 1.24.1
  • Spectra – WordPress Gutenberg Blocks 1.24.2
  • Spectra – WordPress Gutenberg Blocks 1.25.0
  • Spectra – WordPress Gutenberg Blocks 1.25.1
  • Spectra – WordPress Gutenberg Blocks 1.25.2
  • Spectra – WordPress Gutenberg Blocks 1.25.3
  • Spectra – WordPress Gutenberg Blocks 1.25.4
  • Spectra – WordPress Gutenberg Blocks 1.25.5
  • Spectra – WordPress Gutenberg Blocks 1.25.6
  • Spectra – WordPress Gutenberg Blocks 2.0.0
  • Spectra – WordPress Gutenberg Blocks 2.0.1
  • Spectra – WordPress Gutenberg Blocks 2.0.2
  • Spectra – WordPress Gutenberg Blocks 2.0.3
  • Spectra – WordPress Gutenberg Blocks 2.0.4
  • Spectra – WordPress Gutenberg Blocks 2.0.5
  • Spectra – WordPress Gutenberg Blocks 2.0.6
  • Spectra – WordPress Gutenberg Blocks 2.0.7
  • Spectra – WordPress Gutenberg Blocks 2.0.8
  • Spectra – WordPress Gutenberg Blocks 2.0.9
  • Spectra – WordPress Gutenberg Blocks 2.0.10
  • Spectra – WordPress Gutenberg Blocks 2.0.11
  • Spectra – WordPress Gutenberg Blocks 2.0.12
  • Spectra – WordPress Gutenberg Blocks 2.0.13
  • Spectra – WordPress Gutenberg Blocks 2.0.14
  • Spectra – WordPress Gutenberg Blocks 2.0.15
  • Spectra – WordPress Gutenberg Blocks 2.0.16
  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8

Information Disclosure of Password-Protected Post Content in Spectra Post Blocks

Skrevet den af i Spectra – WordPress Gutenberg Blocks

The Post and Post Timeline blocks rendered post excerpts without checking post_password_required(), exposing the content of password-protected posts to unauthenticated visitors. The fix adds that guard.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 1.21.0
  • Spectra – WordPress Gutenberg Blocks 1.21.1
  • Spectra – WordPress Gutenberg Blocks 1.22.0
  • Spectra – WordPress Gutenberg Blocks 1.22.1
  • Spectra – WordPress Gutenberg Blocks 1.22.2
  • Spectra – WordPress Gutenberg Blocks 1.22.3
  • Spectra – WordPress Gutenberg Blocks 1.22.4
  • Spectra – WordPress Gutenberg Blocks 1.22.5
  • Spectra – WordPress Gutenberg Blocks 1.23.0
  • Spectra – WordPress Gutenberg Blocks 1.23.1
  • Spectra – WordPress Gutenberg Blocks 1.23.2
  • Spectra – WordPress Gutenberg Blocks 1.23.3
  • Spectra – WordPress Gutenberg Blocks 1.23.4
  • Spectra – WordPress Gutenberg Blocks 1.23.5
  • Spectra – WordPress Gutenberg Blocks 1.24.0
  • Spectra – WordPress Gutenberg Blocks 1.24.1
  • Spectra – WordPress Gutenberg Blocks 1.24.2
  • Spectra – WordPress Gutenberg Blocks 1.25.0
  • Spectra – WordPress Gutenberg Blocks 1.25.1
  • Spectra – WordPress Gutenberg Blocks 1.25.2
  • Spectra – WordPress Gutenberg Blocks 1.25.3
  • Spectra – WordPress Gutenberg Blocks 1.25.4
  • Spectra – WordPress Gutenberg Blocks 1.25.5
  • Spectra – WordPress Gutenberg Blocks 1.25.6
  • Spectra – WordPress Gutenberg Blocks 2.0.0
  • Spectra – WordPress Gutenberg Blocks 2.0.1
  • Spectra – WordPress Gutenberg Blocks 2.0.2
  • Spectra – WordPress Gutenberg Blocks 2.0.3
  • Spectra – WordPress Gutenberg Blocks 2.0.4
  • Spectra – WordPress Gutenberg Blocks 2.0.5
  • Spectra – WordPress Gutenberg Blocks 2.0.6
  • Spectra – WordPress Gutenberg Blocks 2.0.7
  • Spectra – WordPress Gutenberg Blocks 2.0.8
  • Spectra – WordPress Gutenberg Blocks 2.0.9
  • Spectra – WordPress Gutenberg Blocks 2.0.10
  • Spectra – WordPress Gutenberg Blocks 2.0.11
  • Spectra – WordPress Gutenberg Blocks 2.0.12
  • Spectra – WordPress Gutenberg Blocks 2.0.13
  • Spectra – WordPress Gutenberg Blocks 2.0.14
  • Spectra – WordPress Gutenberg Blocks 2.0.15
  • Spectra – WordPress Gutenberg Blocks 2.0.16
  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0
  • Spectra – WordPress Gutenberg Blocks 2.18.1
  • Spectra – WordPress Gutenberg Blocks 2.18.2
  • Spectra – WordPress Gutenberg Blocks 2.18.3
  • Spectra – WordPress Gutenberg Blocks 2.19.0
  • Spectra – WordPress Gutenberg Blocks 2.19.1
  • Spectra – WordPress Gutenberg Blocks 2.19.2
  • Spectra – WordPress Gutenberg Blocks 2.19.3
  • Spectra – WordPress Gutenberg Blocks 2.19.4
  • Spectra – WordPress Gutenberg Blocks 2.19.5
  • Spectra – WordPress Gutenberg Blocks 2.19.6
  • Spectra – WordPress Gutenberg Blocks 2.19.7
  • Spectra – WordPress Gutenberg Blocks 2.19.8
  • Spectra – WordPress Gutenberg Blocks 2.19.9
  • Spectra – WordPress Gutenberg Blocks 2.19.10
  • Spectra – WordPress Gutenberg Blocks 2.19.11
  • Spectra – WordPress Gutenberg Blocks 2.19.11-beta.1
  • Spectra – WordPress Gutenberg Blocks 2.19.12
  • Spectra – WordPress Gutenberg Blocks 2.19.13
  • Spectra – WordPress Gutenberg Blocks 2.19.14
  • Spectra – WordPress Gutenberg Blocks 2.19.15
  • Spectra – WordPress Gutenberg Blocks 2.19.16
  • Spectra – WordPress Gutenberg Blocks 2.19.17
  • Spectra – WordPress Gutenberg Blocks 3.0.0-beta.1
  • Spectra – WordPress Gutenberg Blocks 3.0.0-beta.2

Incorrect Permissions in Spectra Popup Builder REST Endpoints

Skrevet den af i Spectra – WordPress Gutenberg Blocks

The spectra-popup post type and its meta fields were exposed via the REST API with auth_callback __return_true, letting unauthenticated visitors read popups and their settings. The fix requires manage_options.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0
  • Spectra – WordPress Gutenberg Blocks 2.18.1
  • Spectra – WordPress Gutenberg Blocks 2.18.2
  • Spectra – WordPress Gutenberg Blocks 2.18.3
  • Spectra – WordPress Gutenberg Blocks 2.19.0
  • Spectra – WordPress Gutenberg Blocks 2.19.1
  • Spectra – WordPress Gutenberg Blocks 2.19.2
  • Spectra – WordPress Gutenberg Blocks 2.19.3
  • Spectra – WordPress Gutenberg Blocks 2.19.4
  • Spectra – WordPress Gutenberg Blocks 2.19.5
  • Spectra – WordPress Gutenberg Blocks 2.19.6
  • Spectra – WordPress Gutenberg Blocks 2.19.7
  • Spectra – WordPress Gutenberg Blocks 2.19.8
  • Spectra – WordPress Gutenberg Blocks 2.19.9
  • Spectra – WordPress Gutenberg Blocks 2.19.10
  • Spectra – WordPress Gutenberg Blocks 2.19.11
  • Spectra – WordPress Gutenberg Blocks 2.19.11-beta.1
  • Spectra – WordPress Gutenberg Blocks 2.19.12
  • Spectra – WordPress Gutenberg Blocks 2.19.13
  • Spectra – WordPress Gutenberg Blocks 2.19.14
  • Spectra – WordPress Gutenberg Blocks 2.19.15
  • Spectra – WordPress Gutenberg Blocks 2.19.16
  • Spectra – WordPress Gutenberg Blocks 2.19.17
  • Spectra – WordPress Gutenberg Blocks 3.0.0-beta.1
  • Spectra – WordPress Gutenberg Blocks 3.0.0-beta.2

Authenticated (Contributor+) Stored Cross-Site Scripting via CF7 and Gravity Forms Styler Form ID

Skrevet den af i Spectra – WordPress Gutenberg Blocks

The Contact Form 7 and Gravity Forms styler blocks used the formId block attribute directly, concatenating it into a shortcode string that is then echoed. A user able to insert or edit a block (Contributor and above) could set formId to a value that breaks out of the shortcode, causing arbitrary HTML or script to be rendered for anyone viewing the page. The Gravity Forms block passed formTabIndex through unchecked in the same way. All versions up to and including 2.20.2 are affected; 2.20.3 casts both values with intval() and defaults formId to 0 when absent.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 1.5.1
  • Spectra – WordPress Gutenberg Blocks 1.10.0
  • Spectra – WordPress Gutenberg Blocks 1.11.0
  • Spectra – WordPress Gutenberg Blocks 1.11.1
  • Spectra – WordPress Gutenberg Blocks 1.12.0
  • Spectra – WordPress Gutenberg Blocks 1.12.1
  • Spectra – WordPress Gutenberg Blocks 1.12.2
  • Spectra – WordPress Gutenberg Blocks 1.12.3
  • Spectra – WordPress Gutenberg Blocks 1.12.4
  • Spectra – WordPress Gutenberg Blocks 1.12.5
  • Spectra – WordPress Gutenberg Blocks 1.13.0
  • Spectra – WordPress Gutenberg Blocks 1.13.1
  • Spectra – WordPress Gutenberg Blocks 1.13.2
  • Spectra – WordPress Gutenberg Blocks 1.13.3
  • Spectra – WordPress Gutenberg Blocks 1.13.4
  • Spectra – WordPress Gutenberg Blocks 1.13.5
  • Spectra – WordPress Gutenberg Blocks 1.13.6
  • Spectra – WordPress Gutenberg Blocks 1.14.0
  • Spectra – WordPress Gutenberg Blocks 1.14.1
  • Spectra – WordPress Gutenberg Blocks 1.14.2
  • Spectra – WordPress Gutenberg Blocks 1.14.3
  • Spectra – WordPress Gutenberg Blocks 1.14.4
  • Spectra – WordPress Gutenberg Blocks 1.14.5
  • Spectra – WordPress Gutenberg Blocks 1.14.6
  • Spectra – WordPress Gutenberg Blocks 1.14.7
  • Spectra – WordPress Gutenberg Blocks 1.14.8
  • Spectra – WordPress Gutenberg Blocks 1.14.9
  • Spectra – WordPress Gutenberg Blocks 1.14.10
  • Spectra – WordPress Gutenberg Blocks 1.14.11
  • Spectra – WordPress Gutenberg Blocks 1.15.0
  • Spectra – WordPress Gutenberg Blocks 1.15.1
  • Spectra – WordPress Gutenberg Blocks 1.15.2
  • Spectra – WordPress Gutenberg Blocks 1.16.0
  • Spectra – WordPress Gutenberg Blocks 1.16.1
  • Spectra – WordPress Gutenberg Blocks 1.17.0
  • Spectra – WordPress Gutenberg Blocks 1.18.0
  • Spectra – WordPress Gutenberg Blocks 1.18.1
  • Spectra – WordPress Gutenberg Blocks 1.18.2
  • Spectra – WordPress Gutenberg Blocks 1.19.0
  • Spectra – WordPress Gutenberg Blocks 1.20.0
  • Spectra – WordPress Gutenberg Blocks 1.20.1
  • Spectra – WordPress Gutenberg Blocks 1.21.0
  • Spectra – WordPress Gutenberg Blocks 1.21.1
  • Spectra – WordPress Gutenberg Blocks 1.22.0
  • Spectra – WordPress Gutenberg Blocks 1.22.1
  • Spectra – WordPress Gutenberg Blocks 1.22.2
  • Spectra – WordPress Gutenberg Blocks 1.22.3
  • Spectra – WordPress Gutenberg Blocks 1.22.4
  • Spectra – WordPress Gutenberg Blocks 1.22.5
  • Spectra – WordPress Gutenberg Blocks 1.23.0
  • Spectra – WordPress Gutenberg Blocks 1.23.1
  • Spectra – WordPress Gutenberg Blocks 1.23.2
  • Spectra – WordPress Gutenberg Blocks 1.23.3
  • Spectra – WordPress Gutenberg Blocks 1.23.4
  • Spectra – WordPress Gutenberg Blocks 1.23.5
  • Spectra – WordPress Gutenberg Blocks 1.24.0
  • Spectra – WordPress Gutenberg Blocks 1.24.1
  • Spectra – WordPress Gutenberg Blocks 1.24.2
  • Spectra – WordPress Gutenberg Blocks 1.25.0
  • Spectra – WordPress Gutenberg Blocks 1.25.1
  • Spectra – WordPress Gutenberg Blocks 1.25.2
  • Spectra – WordPress Gutenberg Blocks 1.25.3
  • Spectra – WordPress Gutenberg Blocks 1.25.4
  • Spectra – WordPress Gutenberg Blocks 1.25.5
  • Spectra – WordPress Gutenberg Blocks 1.25.6
  • Spectra – WordPress Gutenberg Blocks 2.0.0
  • Spectra – WordPress Gutenberg Blocks 2.0.1
  • Spectra – WordPress Gutenberg Blocks 2.0.2
  • Spectra – WordPress Gutenberg Blocks 2.0.3
  • Spectra – WordPress Gutenberg Blocks 2.0.4
  • Spectra – WordPress Gutenberg Blocks 2.0.5
  • Spectra – WordPress Gutenberg Blocks 2.0.6
  • Spectra – WordPress Gutenberg Blocks 2.0.7
  • Spectra – WordPress Gutenberg Blocks 2.0.8
  • Spectra – WordPress Gutenberg Blocks 2.0.9
  • Spectra – WordPress Gutenberg Blocks 2.0.10
  • Spectra – WordPress Gutenberg Blocks 2.0.11
  • Spectra – WordPress Gutenberg Blocks 2.0.12
  • Spectra – WordPress Gutenberg Blocks 2.0.13
  • Spectra – WordPress Gutenberg Blocks 2.0.14
  • Spectra – WordPress Gutenberg Blocks 2.0.15
  • Spectra – WordPress Gutenberg Blocks 2.0.16
  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0
  • Spectra – WordPress Gutenberg Blocks 2.18.1
  • Spectra – WordPress Gutenberg Blocks 2.18.2
  • Spectra – WordPress Gutenberg Blocks 2.18.3
  • Spectra – WordPress Gutenberg Blocks 2.19.0
  • Spectra – WordPress Gutenberg Blocks 2.19.1
  • Spectra – WordPress Gutenberg Blocks 2.19.2
  • Spectra – WordPress Gutenberg Blocks 2.19.3
  • Spectra – WordPress Gutenberg Blocks 2.19.4
  • Spectra – WordPress Gutenberg Blocks 2.19.5
  • Spectra – WordPress Gutenberg Blocks 2.19.6
  • Spectra – WordPress Gutenberg Blocks 2.19.7
  • Spectra – WordPress Gutenberg Blocks 2.19.8
  • Spectra – WordPress Gutenberg Blocks 2.19.9
  • Spectra – WordPress Gutenberg Blocks 2.19.10
  • Spectra – WordPress Gutenberg Blocks 2.19.11
  • Spectra – WordPress Gutenberg Blocks 2.19.11-beta.1
  • Spectra – WordPress Gutenberg Blocks 2.19.12
  • Spectra – WordPress Gutenberg Blocks 2.19.13
  • Spectra – WordPress Gutenberg Blocks 2.19.14
  • Spectra – WordPress Gutenberg Blocks 2.19.15
  • Spectra – WordPress Gutenberg Blocks 2.19.16
  • Spectra – WordPress Gutenberg Blocks 2.19.17
  • Spectra – WordPress Gutenberg Blocks 2.19.18
  • Spectra – WordPress Gutenberg Blocks 2.19.19
  • Spectra – WordPress Gutenberg Blocks 2.19.20
  • Spectra – WordPress Gutenberg Blocks 2.19.21
  • Spectra – WordPress Gutenberg Blocks 2.19.22
  • Spectra – WordPress Gutenberg Blocks 2.19.23
  • Spectra – WordPress Gutenberg Blocks 2.19.24
  • Spectra – WordPress Gutenberg Blocks 2.19.25
  • Spectra – WordPress Gutenberg Blocks 2.19.26
  • Spectra – WordPress Gutenberg Blocks 2.19.27
  • Spectra – WordPress Gutenberg Blocks 2.19.28
  • Spectra – WordPress Gutenberg Blocks 2.19.29
  • Spectra – WordPress Gutenberg Blocks 2.20.0
  • Spectra – WordPress Gutenberg Blocks 2.20.1
  • Spectra – WordPress Gutenberg Blocks 2.20.2
  • Spectra – WordPress Gutenberg Blocks 3.0.0-beta.1
  • Spectra – WordPress Gutenberg Blocks 3.0.0-beta.2

Authenticated (contributor+) stored cross-site scripting via custom page-level css

Skrevet den af i Spectra – WordPress Gutenberg Blocks

Due to insufficient input sanitization and output escaping, it makes possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0
  • Spectra – WordPress Gutenberg Blocks 2.18.1
  • Spectra – WordPress Gutenberg Blocks 2.18.2
  • Spectra – WordPress Gutenberg Blocks 2.18.3
  • Spectra – WordPress Gutenberg Blocks 2.19.0
  • Spectra – WordPress Gutenberg Blocks 2.19.1
  • Spectra – WordPress Gutenberg Blocks 2.19.2
  • Spectra – WordPress Gutenberg Blocks 2.19.3
  • Spectra – WordPress Gutenberg Blocks 2.19.4
  • Spectra – WordPress Gutenberg Blocks 2.19.5
  • Spectra – WordPress Gutenberg Blocks 2.19.6
  • Spectra – WordPress Gutenberg Blocks 2.19.7
  • Spectra – WordPress Gutenberg Blocks 2.19.8
  • Spectra – WordPress Gutenberg Blocks 2.19.9
  • Spectra – WordPress Gutenberg Blocks 2.19.10
  • Spectra – WordPress Gutenberg Blocks 2.19.11
  • Spectra – WordPress Gutenberg Blocks 2.19.11-beta.1
  • Spectra – WordPress Gutenberg Blocks 2.19.12
  • Spectra – WordPress Gutenberg Blocks 2.19.13
  • Spectra – WordPress Gutenberg Blocks 2.19.14

CSRF and access control vulnerability in notice dismissal handler

Skrevet den af i Spectra – WordPress Gutenberg Blocks

Cross-site request forgery possible because the code did not validate the wordpress security nonce before processing dismissal requests. This could allow any external site or attacker to craft a POST request that could be executed in the context of an authenticated wordpress user.

This vulnerability affects the following application versions:

  • Ultimate Addons for Elementor 1.6.34
  • Ultimate Addons for Elementor 1.6.35
  • Ultimate Addons for Elementor 1.6.36
  • Ultimate Addons for Elementor 1.6.37
  • Ultimate Addons for Elementor 2.0.0
  • Ultimate Addons for Elementor 2.0.1
  • Ultimate Addons for Elementor 2.0.2
  • Ultimate Addons for Elementor 2.0.3
  • Ultimate Addons for Elementor 2.0.4
  • Ultimate Addons for Elementor 2.0.5
  • Ultimate Addons for Elementor 2.0.6
  • Ultimate Addons for Elementor 2.1.0
  • Spectra – WordPress Gutenberg Blocks 1.24.0
  • Spectra – WordPress Gutenberg Blocks 1.24.1
  • Spectra – WordPress Gutenberg Blocks 1.24.2
  • Spectra – WordPress Gutenberg Blocks 1.25.0
  • Spectra – WordPress Gutenberg Blocks 1.25.1
  • Spectra – WordPress Gutenberg Blocks 1.25.2
  • Spectra – WordPress Gutenberg Blocks 1.25.3
  • Spectra – WordPress Gutenberg Blocks 1.25.4
  • Spectra – WordPress Gutenberg Blocks 1.25.5
  • Spectra – WordPress Gutenberg Blocks 1.25.6
  • Spectra – WordPress Gutenberg Blocks 2.0.0
  • Spectra – WordPress Gutenberg Blocks 2.0.1
  • Spectra – WordPress Gutenberg Blocks 2.0.2
  • Spectra – WordPress Gutenberg Blocks 2.0.3
  • Spectra – WordPress Gutenberg Blocks 2.0.4
  • Spectra – WordPress Gutenberg Blocks 2.0.5
  • Spectra – WordPress Gutenberg Blocks 2.0.6
  • Spectra – WordPress Gutenberg Blocks 2.0.7
  • Spectra – WordPress Gutenberg Blocks 2.0.8
  • Spectra – WordPress Gutenberg Blocks 2.0.9
  • Spectra – WordPress Gutenberg Blocks 2.0.10
  • Spectra – WordPress Gutenberg Blocks 2.0.11
  • Spectra – WordPress Gutenberg Blocks 2.0.12
  • Spectra – WordPress Gutenberg Blocks 2.0.13
  • Spectra – WordPress Gutenberg Blocks 2.0.14
  • Spectra – WordPress Gutenberg Blocks 2.0.15
  • Spectra – WordPress Gutenberg Blocks 2.0.16
  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0
  • Spectra – WordPress Gutenberg Blocks 2.18.1
  • Spectra – WordPress Gutenberg Blocks 2.18.2
  • Spectra – WordPress Gutenberg Blocks 2.18.3
  • Spectra – WordPress Gutenberg Blocks 2.19.0
  • Spectra – WordPress Gutenberg Blocks 2.19.1
  • Spectra – WordPress Gutenberg Blocks 2.19.2
  • Starter Templates – AI-Powered Templates 3.1.12
  • Starter Templates – AI-Powered Templates 3.1.13
  • Starter Templates – AI-Powered Templates 3.1.14
  • Starter Templates – AI-Powered Templates 3.1.15
  • Starter Templates – AI-Powered Templates 3.1.16
  • Starter Templates – AI-Powered Templates 3.5.3
  • Starter Templates – AI-Powered Templates 4.0.0
  • Starter Templates – AI-Powered Templates 4.0.1
  • Starter Templates – AI-Powered Templates 4.0.2
  • Starter Templates – AI-Powered Templates 4.0.3
  • Starter Templates – AI-Powered Templates 4.0.4
  • Starter Templates – AI-Powered Templates 4.0.5
  • Starter Templates – AI-Powered Templates 4.0.6
  • Starter Templates – AI-Powered Templates 4.0.7
  • Starter Templates – AI-Powered Templates 4.0.8
  • Starter Templates – AI-Powered Templates 4.0.9
  • Starter Templates – AI-Powered Templates 4.0.10
  • Starter Templates – AI-Powered Templates 4.0.11
  • Starter Templates – AI-Powered Templates 4.0.12
  • Starter Templates – AI-Powered Templates 4.0.13

XSS in the blocks config

Skrevet den af i Spectra – WordPress Gutenberg Blocks

The page limit attributes of the pagination are not properly sanitized to prevent an XSS attack.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 1.5.1
  • Spectra – WordPress Gutenberg Blocks 1.15.0
  • Spectra – WordPress Gutenberg Blocks 1.15.1
  • Spectra – WordPress Gutenberg Blocks 1.15.2
  • Spectra – WordPress Gutenberg Blocks 1.16.0
  • Spectra – WordPress Gutenberg Blocks 1.16.1
  • Spectra – WordPress Gutenberg Blocks 1.17.0
  • Spectra – WordPress Gutenberg Blocks 1.18.0
  • Spectra – WordPress Gutenberg Blocks 1.18.1
  • Spectra – WordPress Gutenberg Blocks 1.18.2
  • Spectra – WordPress Gutenberg Blocks 1.19.0
  • Spectra – WordPress Gutenberg Blocks 1.20.0
  • Spectra – WordPress Gutenberg Blocks 1.20.1
  • Spectra – WordPress Gutenberg Blocks 1.21.0
  • Spectra – WordPress Gutenberg Blocks 1.21.1
  • Spectra – WordPress Gutenberg Blocks 1.22.0
  • Spectra – WordPress Gutenberg Blocks 1.22.1
  • Spectra – WordPress Gutenberg Blocks 1.22.2
  • Spectra – WordPress Gutenberg Blocks 1.22.3
  • Spectra – WordPress Gutenberg Blocks 1.22.4
  • Spectra – WordPress Gutenberg Blocks 1.22.5
  • Spectra – WordPress Gutenberg Blocks 1.23.0
  • Spectra – WordPress Gutenberg Blocks 1.23.1
  • Spectra – WordPress Gutenberg Blocks 1.23.2
  • Spectra – WordPress Gutenberg Blocks 1.23.3
  • Spectra – WordPress Gutenberg Blocks 1.23.4
  • Spectra – WordPress Gutenberg Blocks 1.23.5
  • Spectra – WordPress Gutenberg Blocks 1.24.0
  • Spectra – WordPress Gutenberg Blocks 1.24.1
  • Spectra – WordPress Gutenberg Blocks 1.24.2
  • Spectra – WordPress Gutenberg Blocks 1.25.0
  • Spectra – WordPress Gutenberg Blocks 1.25.1
  • Spectra – WordPress Gutenberg Blocks 1.25.2
  • Spectra – WordPress Gutenberg Blocks 1.25.3
  • Spectra – WordPress Gutenberg Blocks 1.25.4
  • Spectra – WordPress Gutenberg Blocks 1.25.5
  • Spectra – WordPress Gutenberg Blocks 1.25.6
  • Spectra – WordPress Gutenberg Blocks 2.0.0
  • Spectra – WordPress Gutenberg Blocks 2.0.1
  • Spectra – WordPress Gutenberg Blocks 2.0.2
  • Spectra – WordPress Gutenberg Blocks 2.0.3
  • Spectra – WordPress Gutenberg Blocks 2.0.4
  • Spectra – WordPress Gutenberg Blocks 2.0.5
  • Spectra – WordPress Gutenberg Blocks 2.0.6
  • Spectra – WordPress Gutenberg Blocks 2.0.7
  • Spectra – WordPress Gutenberg Blocks 2.0.8
  • Spectra – WordPress Gutenberg Blocks 2.0.9
  • Spectra – WordPress Gutenberg Blocks 2.0.10
  • Spectra – WordPress Gutenberg Blocks 2.0.11
  • Spectra – WordPress Gutenberg Blocks 2.0.12
  • Spectra – WordPress Gutenberg Blocks 2.0.13
  • Spectra – WordPress Gutenberg Blocks 2.0.14
  • Spectra – WordPress Gutenberg Blocks 2.0.15
  • Spectra – WordPress Gutenberg Blocks 2.0.16
  • Spectra – WordPress Gutenberg Blocks 2.1.0
  • Spectra – WordPress Gutenberg Blocks 2.1.1
  • Spectra – WordPress Gutenberg Blocks 2.2.0
  • Spectra – WordPress Gutenberg Blocks 2.3.0
  • Spectra – WordPress Gutenberg Blocks 2.3.1
  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4
  • Spectra – WordPress Gutenberg Blocks 2.16.5
  • Spectra – WordPress Gutenberg Blocks 2.17.0
  • Spectra – WordPress Gutenberg Blocks 2.18.0

Incorrect permission via the categories api

Skrevet den af i Spectra – WordPress Gutenberg Blocks

This fix adds a permission check to restrict access to the Categories API. It ensures that only users with the manage_ast_block_templates capability can perform certain actions, preventing unauthorized users from accessing or modifying category data. This improves security by enforcing proper access controls.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Starter Templates – AI-Powered Templates 0.4.4.0
  • Starter Templates – AI-Powered Templates 3.5.0
  • Starter Templates – AI-Powered Templates 3.5.2
  • Starter Templates – AI-Powered Templates 3.5.3
  • Starter Templates – AI-Powered Templates 3.5.4
  • Starter Templates – AI-Powered Templates 3.5.5
  • Starter Templates – AI-Powered Templates 3.5.6
  • Starter Templates – AI-Powered Templates 3.5.7
  • Starter Templates – AI-Powered Templates 4.0.0
  • Starter Templates – AI-Powered Templates 4.0.1
  • Starter Templates – AI-Powered Templates 4.0.2
  • Starter Templates – AI-Powered Templates 4.0.3
  • Starter Templates – AI-Powered Templates 4.0.4
  • Starter Templates – AI-Powered Templates 4.0.5
  • Starter Templates – AI-Powered Templates 4.0.6
  • Starter Templates – AI-Powered Templates 4.0.7
  • Starter Templates – AI-Powered Templates 4.0.8
  • Starter Templates – AI-Powered Templates 4.0.9
  • Starter Templates – AI-Powered Templates 4.0.10
  • Starter Templates – AI-Powered Templates 4.0.11
  • Starter Templates – AI-Powered Templates 4.0.12
  • Starter Templates – AI-Powered Templates 4.0.13
  • Starter Templates – AI-Powered Templates 4.1.0
  • Starter Templates – AI-Powered Templates 4.1.1
  • Starter Templates – AI-Powered Templates 4.1.2
  • Starter Templates – AI-Powered Templates 4.1.3
  • Starter Templates – AI-Powered Templates 4.1.4
  • Starter Templates – AI-Powered Templates 4.1.5
  • Starter Templates – AI-Powered Templates 4.1.6
  • Starter Templates – AI-Powered Templates 4.1.7
  • Starter Templates – AI-Powered Templates 4.2.0
  • Starter Templates – AI-Powered Templates 4.2.1
  • Starter Templates – AI-Powered Templates 4.2.2
  • Starter Templates – AI-Powered Templates 4.2.3
  • Starter Templates – AI-Powered Templates 4.2.4
  • Starter Templates – AI-Powered Templates 4.2.5
  • Starter Templates – AI-Powered Templates 4.2.6
  • Starter Templates – AI-Powered Templates 4.3.0
  • Starter Templates – AI-Powered Templates 4.3.1
  • Starter Templates – AI-Powered Templates 4.3.2
  • Starter Templates – AI-Powered Templates 4.3.3
  • Starter Templates – AI-Powered Templates 4.3.4
  • Starter Templates – AI-Powered Templates 4.3.5
  • Starter Templates – AI-Powered Templates 4.3.6
  • Starter Templates – AI-Powered Templates 4.3.7
  • Starter Templates – AI-Powered Templates 4.3.8
  • Starter Templates – AI-Powered Templates 4.3.9
  • Starter Templates – AI-Powered Templates 4.4.0
  • Starter Templates – AI-Powered Templates 4.4.1

Insecure Hardcoded URL Parameter Leading to Potential Attacks

Skrevet den af i Spectra – WordPress Gutenberg Blocks

ZIP_AI_CREDIT_TOPUP_URL is not strictly validated or sanitized, an attacker could craft a malicious URL and inject arbitrary parameters, leading to phishing, open redirects, or unauthorized actions on external services

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1

Xss vectors in different sections

Skrevet den af i Spectra – WordPress Gutenberg Blocks

An invalid sanitation and validation leads to an XSS attack in the frontend js and url attributes.

This vulnerability affects the following application versions:

  • Spectra – WordPress Gutenberg Blocks 2.3.2
  • Spectra – WordPress Gutenberg Blocks 2.3.3
  • Spectra – WordPress Gutenberg Blocks 2.3.4
  • Spectra – WordPress Gutenberg Blocks 2.3.5
  • Spectra – WordPress Gutenberg Blocks 2.4.0
  • Spectra – WordPress Gutenberg Blocks 2.4.1
  • Spectra – WordPress Gutenberg Blocks 2.4.2
  • Spectra – WordPress Gutenberg Blocks 2.5.0
  • Spectra – WordPress Gutenberg Blocks 2.5.1
  • Spectra – WordPress Gutenberg Blocks 2.6.0
  • Spectra – WordPress Gutenberg Blocks 2.6.1
  • Spectra – WordPress Gutenberg Blocks 2.6.2
  • Spectra – WordPress Gutenberg Blocks 2.6.3
  • Spectra – WordPress Gutenberg Blocks 2.6.4
  • Spectra – WordPress Gutenberg Blocks 2.6.5
  • Spectra – WordPress Gutenberg Blocks 2.6.6
  • Spectra – WordPress Gutenberg Blocks 2.6.7
  • Spectra – WordPress Gutenberg Blocks 2.6.8
  • Spectra – WordPress Gutenberg Blocks 2.6.9
  • Spectra – WordPress Gutenberg Blocks 2.7.0
  • Spectra – WordPress Gutenberg Blocks 2.7.1
  • Spectra – WordPress Gutenberg Blocks 2.7.2
  • Spectra – WordPress Gutenberg Blocks 2.7.3
  • Spectra – WordPress Gutenberg Blocks 2.7.4
  • Spectra – WordPress Gutenberg Blocks 2.7.5
  • Spectra – WordPress Gutenberg Blocks 2.7.6
  • Spectra – WordPress Gutenberg Blocks 2.7.7
  • Spectra – WordPress Gutenberg Blocks 2.7.8
  • Spectra – WordPress Gutenberg Blocks 2.7.9
  • Spectra – WordPress Gutenberg Blocks 2.7.10
  • Spectra – WordPress Gutenberg Blocks 2.7.11
  • Spectra – WordPress Gutenberg Blocks 2.8.0
  • Spectra – WordPress Gutenberg Blocks 2.9.0
  • Spectra – WordPress Gutenberg Blocks 2.9.1
  • Spectra – WordPress Gutenberg Blocks 2.10.0
  • Spectra – WordPress Gutenberg Blocks 2.10.1
  • Spectra – WordPress Gutenberg Blocks 2.10.2
  • Spectra – WordPress Gutenberg Blocks 2.10.3
  • Spectra – WordPress Gutenberg Blocks 2.10.4
  • Spectra – WordPress Gutenberg Blocks 2.10.5
  • Spectra – WordPress Gutenberg Blocks 2.11.0
  • Spectra – WordPress Gutenberg Blocks 2.11.1
  • Spectra – WordPress Gutenberg Blocks 2.11.2
  • Spectra – WordPress Gutenberg Blocks 2.11.3
  • Spectra – WordPress Gutenberg Blocks 2.11.4
  • Spectra – WordPress Gutenberg Blocks 2.12.0
  • Spectra – WordPress Gutenberg Blocks 2.12.1
  • Spectra – WordPress Gutenberg Blocks 2.12.2
  • Spectra – WordPress Gutenberg Blocks 2.12.3
  • Spectra – WordPress Gutenberg Blocks 2.12.4
  • Spectra – WordPress Gutenberg Blocks 2.12.5
  • Spectra – WordPress Gutenberg Blocks 2.12.6
  • Spectra – WordPress Gutenberg Blocks 2.12.7
  • Spectra – WordPress Gutenberg Blocks 2.12.8
  • Spectra – WordPress Gutenberg Blocks 2.12.9
  • Spectra – WordPress Gutenberg Blocks 2.13.0
  • Spectra – WordPress Gutenberg Blocks 2.13.1
  • Spectra – WordPress Gutenberg Blocks 2.13.2
  • Spectra – WordPress Gutenberg Blocks 2.13.3
  • Spectra – WordPress Gutenberg Blocks 2.13.4
  • Spectra – WordPress Gutenberg Blocks 2.13.5
  • Spectra – WordPress Gutenberg Blocks 2.13.6
  • Spectra – WordPress Gutenberg Blocks 2.13.7
  • Spectra – WordPress Gutenberg Blocks 2.13.8
  • Spectra – WordPress Gutenberg Blocks 2.13.9
  • Spectra – WordPress Gutenberg Blocks 2.14.0
  • Spectra – WordPress Gutenberg Blocks 2.14.1
  • Spectra – WordPress Gutenberg Blocks 2.15.0
  • Spectra – WordPress Gutenberg Blocks 2.15.1
  • Spectra – WordPress Gutenberg Blocks 2.15.2
  • Spectra – WordPress Gutenberg Blocks 2.15.3
  • Spectra – WordPress Gutenberg Blocks 2.16.0
  • Spectra – WordPress Gutenberg Blocks 2.16.1
  • Spectra – WordPress Gutenberg Blocks 2.16.2
  • Spectra – WordPress Gutenberg Blocks 2.16.3
  • Spectra – WordPress Gutenberg Blocks 2.16.4