Product by Brainstorm Force

    Spectra

    18 known vulnerabilities in Spectra (Brainstorm Force), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Spectra (Brainstorm Force)
    MediumCVE-2026-119520

    WordPress Spectra plugin <= 2.20.4 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-125800

    WordPress Spectra plugin <= 2.20.5 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-125802

    WordPress Spectra plugin <= 2.20.5 - Sensitive Data Exposure vulnerability

    		5.3
    MediumCVE-2026-128834

    WordPress Spectra plugin <= 2.20.5 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2023-49833

    WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)

    also in 2 other products

    		6.5
    CriticalCVE-2023-23834

    Brainstorm Force Spectra: Missing Authorization

    also in 1 other product

    		4.3
    HighCVE-2023-36679

    WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability

    also in 1 other product

    		7.1
    HighCVE-2023-36676

    WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability

    also in 1 other product

    		5.4
    MediumCVE-2024-7590

    WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2026-24982

    WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2023-23729

    Brainstorm Force Spectra: Missing Authorization

    		5.4
    MediumCVE-2024-3827

    Spectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDs

    also in 1 other product

    		6.4
    MediumCVE-2023-23730

    WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability

    also in 1 other product

    		5.3
    HighCVE-2023-23825

    Brainstorm Force Spectra: Missing Authorization

    also in 1 other product

    		3.1
    HighCVE-2024-37517

    WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability

    also in 1 other product

    		4.3
    MediumCVE-2026-42648

    WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2023-23738

    Brainstorm Force Spectra: Injection

    also in 1 other product

    		5.3
    MediumCVE-2023-23735

    Brainstorm Force Spectra: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    also in 1 other product

    		5.3

    All products by Brainstorm Force