Spectra – WordPress Gutenberg Blocks, 1888890de8288bed7ddf4a00d021709f225e73fe
- CVE, Research URL
- Application
- Published on
- Jul 14, 2023
- Research Description
- Spectra Gutenberg Blocks – Website Builder for the Block Editor [ultimate-addons-for-gutenberg] < 2.6.7 Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in template_importer The Spectra plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 2.6.6 via the template_importer function. This can allow authenticated attackers, with contributor-level permissions and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
- Affected versions
-
max 2.6.7.
- Status
-
vulnerable