Spectra
Vendor:
First CVE: Feb 21, 2023 · Active for 3 years
21
Total CVEs
More Total CVEs than 94% of tracked products
5.3
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
6.0
Avg CVSS
Higher Avg CVSS than 21% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Spectra over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 21, 2023
3 years ago
Most Recent CVE
Apr 29, 2026
87 days ago
CVE Severity & Scoring
Spectra21 CVEs
81%
14%
All CVEs352,427 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network21 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low21 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None12 (57.1%)
Unknown0 (0.0%)
Required9 (42.9%)
Privileges Required
Low16 (76.2%)
High0 (0.0%)
None5 (23.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-23834CRITICAL Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through | Dec 9, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-37517HIGH Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through | Nov 1, 2024 | 8.8 | 23 | NO | NO |
CVE-2023-36676HIGH Missing Authorization vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6. | Jun 19, 2024 | 8.8 | 23 | NO | NO |
CVE-2023-23825HIGH Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through | Dec 9, 2024 | 8.8 | 22 | NO | NO |
CVE-2026-42648MEDIUM Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff | Apr 29, 2026 | 4.3 | 20 | NO | NO |
CVE-2023-23729MEDIUM Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through | Dec 9, 2025 | 5.4 | 20 | NO | NO |
CVE-2023-36679MEDIUM Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6. | Mar 28, 2024 | 6.5 | 20 | NO | NO |
CVE-2020-36656MEDIUM The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing contributors to conduct stored XSS attacks via the plugin's | Feb 21, 2023 | 5.4 | 20 | NO | NO |
CVE-2026-24982MEDIUM Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff | Feb 3, 2026 | 5.3 | 19 | NO | NO |
CVE-2023-23735MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force Spectra allows Code Injection.This issue affects Spectra: from n/a t | Jun 3, 2024 | 6.1 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Spectra
Top CWEs
Versions
No cataloged versions.