Description
WordPress Plugin Spectra-WordPress Gutenberg Blocks is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change plugin's settings. WordPress Plugin Spectra-WordPress Gutenberg Blocks version 1.14.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.14.8 or latest
References
https://blog.nintechnet.com/wordpress-ultimate-addons-for-gutenberg-plugin-fixed-vulnerability/
https://plugins.svn.wordpress.org/ultimate-addons-for-gutenberg/trunk/readme.txt
Related Vulnerabilities
Python Improper Restriction of XML External Entity Reference Vulnerability (CVE-2022-48565)
WordPress Plugin Spider Calendar Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.1)
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2022-42129)
PHP Use After Free Vulnerability (CVE-2017-12934)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-1280)