WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-addons-for-gutenberg
Published
2022-05-31
Title
Spectra < 1.25.6 - Reflected Cross-Site Scripting
Slug
ultimate-addons-for-gutenberg
Published
2023-01-24
Title
Spectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting
Slug
ultimate-addons-for-gutenberg
Published
2023-12-05
Title
Spectra < 2.7.10 - Contributor+ Stored XSS
Slug
ultimate-addons-for-gutenberg
Published
2024-04-03
Title
Spectra – WordPress Gutenberg Blocks < 2.10.4 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS
Slug
ultimate-addons-for-gutenberg
Published
2024-04-26
Title
Spectra – WordPress Gutenberg Blocks < 2.12.7 - Contributor+ Path Traversal
Slug
ultimate-addons-for-gutenberg
Published
2024-05-22
Title
Spectra – WordPress Gutenberg Blocks < 2.12.9 - Contributor+ Stored XSS via Testimonial Block
Slug
ultimate-addons-for-gutenberg
Published
2024-05-22
Title
Spectra – WordPress Gutenberg Blocks < 2.12.9 - Contributor+ Stored XSS via Image Gallery Block
Slug
ultimate-addons-for-gutenberg
Published
2024-05-23
Title
Spectra < 2.13.1 - Author+ Stored XSS
Slug
ultimate-addons-for-gutenberg
Published
2024-07-05
Title
Spectra < 2.13.8 - Missing Authorization via generate_ai_content
Slug
ultimate-addons-for-gutenberg
Published
2024-08-07
Title
Spectra – WordPress Gutenberg Blocks < 2.15.1 - Authenticated (Contributor+) Stored Cross-site Scripting
Slug
ultimate-addons-for-gutenberg
Published
2024-12-02
Title
Spectra – WordPress Gutenberg Blocks < 2.16.3 - Contributor+ Stored XSS via Team Widget
Slug
ultimate-addons-for-gutenberg
Published
2025-03-25
Title
Spectra < 2.19.1 - Contributor+ Stored XSS
Slug
ultimate-addons-for-gutenberg
Published
2025-11-04
Title
Spectra < 2.19.15 - Contributor+ Stored XSS via Custom CSS
Slug
ultimate-addons-for-gutenberg
Published
2026-02-02
Title
Spectra Gutenberg Blocks < 2.19.18 - Unauthenticated Information Disclosure in Sensitive Data
Slug
ultimate-addons-for-gutenberg
Published
2026-01-17
Title
Spectra < 2.19.18 - Missing Authorization
Slug
ultimate-addons-for-gutenberg
Published
2026-03-27
Title
Spectra < 2.19.23 - Contributor+ Missing Authorization
Slug
ultimate-addons-for-gutenberg
Published
2026-05-29
Title
Spectra < 2.19.26 - Contributor+ Remote Code Execution via Block Attributes
Slug
ultimate-addons-for-gutenberg
Published
2026-07-20
Title
Spectra < 2.19.29 - Contributor+ Stored XSS via uagb/image Block
Slug
ultimate-addons-for-gutenberg
Published
2026-07-20
Title
Spectra (Ultimate Addons for Gutenberg) < 2.20.0 - Contributor+ Stored CSS Injection via Block Attributes
Slug
ultimate-addons-for-gutenberg
Published
2026-09-23
Title
Spectra < 2.20.1 - Contributor+ Instagram Access Token Disclosure
Slug
ultimate-addons-for-gutenberg
Published
2026-10-30
Title
Spectra < 2.20.5 - Unauthenticated Limited Theme File Deletion and Modification
Slug
ultimate-ajax-login
Published
2025-09-05
Title
Ultimate AJAX Login <= 1.2.1 - Cross-Site Request Forgery
Slug
ultimate-appointment-scheduling
Published
2020-08-10
Title
Ultimate Appointment Booking & Scheduling < 1.1.10 - Authenticated Cross-Site Scripting (XSS)
Slug
ultimate-auction
Published
2014-08-01
Title
Ultimate Auction 1.0 - Cross-Site Request Forgery (CSRF)
Slug
ultimate-auction
Published
2019-12-18
Title
Ultimate Auction < 4.0.6 - Multiple CSRF & XSS