Medium · 4.3 CVE-2026-42648 EUVD-2026-26218GHSA-j4gc-v87p-mgg2

WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability

Published Apr 29, 2026 · Updated May 12, 2026 · Assigned by Patchstack

Vendor: Brainstorm Force Product: Spectra

Description

Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through <= 2.19.22.

Affected products

Vendor	Product	Affected	Fixed
Brainstorm Force	Spectra	≤ 2.19.22	—

References

https://patchstack.com/database/Wordpress/Plugin/ultimate-addons-for-gutenberg/vulnerability/wordpress-spectra-plugin-2-19-22-broken-access-control-vulnerability?_s_id=cve vdb-entry