Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

CVE-2026-24982: Incorrect Access Control in Spectra Gutenberg Add-ons Puts Data at Risk

CVE-2026-24982 · published 9 months ago
Summary

A weakness in Spectra's access controls means that some users may be able to view or modify sensitive data they shouldn't have access to. This affects all versions of Spectra up to 2.19.17. Update to the latest version to fix this issue.

Original advisory text
Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: fro...
Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through <= 2.19.17.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published3 Feb 2026
Updated30 Oct 2026
First seen7 Mar 2026
Sources
Track software like this
Free during beta