PT-2026-97784
CVE-2026-16302
·
تاريخ النشر
2026-09-24
·
تاريخ التحديث
2026-09-24
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Spectra Legacy – Gutenberg Blocks versions prior to 2.20.1
Description
Sensitive information exposure occurs via the
editor assets() function, which exposes the uag insta linked accounts option through the uagb blocks info object without performing a capability check. Authenticated attackers with Contributor-level access or higher can extract sensitive data, including raw Instagram Graph API access tokens configured by an administrator. This issue requires the Spectra Pro plugin to be active and have a linked Instagram account.Recommendations
Update Spectra Legacy – Gutenberg Blocks to version 2.20.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾