Spectra vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SP

Product

Spectra

by Brainstorm Force · last CVE Apr 29, 2026

12

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 1High 3Medium 8Low 0

Severity

All severities12 Critical1 High3 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Spectra to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-36679	6.5	0%	Mar 28	WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability Affected: through 2.6.6
CVE-2023-23735	6.1	0%	Jun 3	WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection Vulnerability Affected: through 2.3.0
CVE-2023-23729	5.4	0%	Dec 9	WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change Vulnerability Affected: through 2.3.0
CVE-2024-7590	5.4	0%	Aug 12	WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability Affected: through 2.14.1
CVE-2026-24982	5.3	0%	Feb 3	WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability Affected: through 2.19.17
CVE-2023-23738	5.3	0%	Jun 3	WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability Affected: through 2.3.0
CVE-2023-23730	5.3	0%	Jun 3	WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability Affected: through 2.3.0
CVE-2026-42648	4.3	0%	Apr 29	WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability Affected: through 2.19.22