Now officially on WordPress.org

CVE Database / CVE-2023-36679

CVE · High

CVE-2023-36679 — Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg] < 2.6.7

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-36679 Spectra Legacy – Gutenberg Blocks [ultimate-addons-for-gutenberg] < 2.6.7 Server-Side Request Forgery (SSRF) High 7.1 < 2.6.7 2.6.7 2023-07-14 —

CVE-2023-36679

The Spectra Legacy plugin for WordPress versions before 2.6.7 contains a Server Side Request Forgery vulnerability that allows attackers to manipulate the affected website into making HTTP requests to arbitrary destinations specified by the attacker. An attacker could exploit this flaw to probe internal services running on the server or connected systems and potentially access sensitive information from those services. The vulnerability was discovered by Rafie Muhammad of Patchstack and has been patched in version 2.6.7 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings